diff --git a/.github/workflows/embedding-backend.yml b/.github/workflows/embedding-backend.yml
index f4dc681..f980fbe 100644
--- a/.github/workflows/embedding-backend.yml
+++ b/.github/workflows/embedding-backend.yml
@@ -23,10 +23,10 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ubuntu-latest, macos-latest, windows-latest]
+        os: [ubuntu-latest, macos-15, windows-latest]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - uses: oven-sh/setup-bun@v2
 
@@ -62,9 +62,10 @@ jobs:
 
       # Node path too — OpenCode's plugin sidecar is Node-based in 1.15.x.
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version: "24"
+          package-manager-cache: false
 
       - name: Embedding smoke (Node)
         run: node scripts/verify-embedding-backend.mjs
diff --git a/.github/workflows/platform-smoke.yml b/.github/workflows/platform-smoke.yml
index 537b000..fdf4ed8 100644
--- a/.github/workflows/platform-smoke.yml
+++ b/.github/workflows/platform-smoke.yml
@@ -24,16 +24,17 @@ jobs:
           - ubuntu-latest
           - windows-latest
           - macos-13
-          - macos-latest
+          - macos-15
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - uses: oven-sh/setup-bun@v2
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v5
         with:
           node-version: "24"
+          package-manager-cache: false
 
       - name: Install source dependencies
         run: bun install
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 4909ac1..4ff43c7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -11,7 +11,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
@@ -24,9 +24,10 @@ jobs:
       - run: bun run build
 
       - name: Setup Node.js for npm publish
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version: '24'
+          package-manager-cache: false
           registry-url: 'https://registry.npmjs.org'
 
       - name: Publish to npm