diff --git a/.github/workflows/ci-emscripten.yml b/.github/workflows/ci-emscripten.yml
index b310c3a0cf..6f5f5db5e9 100644
--- a/.github/workflows/ci-emscripten.yml
+++ b/.github/workflows/ci-emscripten.yml
@@ -18,14 +18,14 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Fix dubious ownership
       run: |
         git config --global --add safe.directory ${GITHUB_WORKSPACE}
 
     - name: Setup cache
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         # If you change this version, change the numbers in the image configuration step,
         # .github/workflows/preview-build.yml (2x) and os/emscripten/Dockerfile too.
diff --git a/.github/workflows/ci-linux.yml b/.github/workflows/ci-linux.yml
index fba4a70a92..8ca7a55b70 100644
--- a/.github/workflows/ci-linux.yml
+++ b/.github/workflows/ci-linux.yml
@@ -30,7 +30,7 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Setup vcpkg
       id: vcpkg
diff --git a/.github/workflows/ci-macos.yml b/.github/workflows/ci-macos.yml
index c310be3a4e..5a9d1c6cd8 100644
--- a/.github/workflows/ci-macos.yml
+++ b/.github/workflows/ci-macos.yml
@@ -32,7 +32,7 @@ jobs:
         xcode-version: latest-stable
 
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Setup vcpkg
       id: vcpkg
diff --git a/.github/workflows/ci-mingw.yml b/.github/workflows/ci-mingw.yml
index 51865c67bd..c723e1fa3a 100644
--- a/.github/workflows/ci-mingw.yml
+++ b/.github/workflows/ci-mingw.yml
@@ -21,7 +21,7 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Setup MSYS2
       uses: msys2/setup-msys2@v2
diff --git a/.github/workflows/ci-windows.yml b/.github/workflows/ci-windows.yml
index b3556cd3c3..161481dfa0 100644
--- a/.github/workflows/ci-windows.yml
+++ b/.github/workflows/ci-windows.yml
@@ -18,7 +18,7 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Setup vcpkg
       id: vcpkg
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index abf9bffbe5..67126dc1ec 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -25,7 +25,7 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Setup vcpkg
       id: vcpkg
diff --git a/.github/workflows/commit-checker.yml b/.github/workflows/commit-checker.yml
index 16aac87da2..00953df905 100644
--- a/.github/workflows/commit-checker.yml
+++ b/.github/workflows/commit-checker.yml
@@ -14,7 +14,7 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: 4
 
diff --git a/.github/workflows/docs-checker.yml b/.github/workflows/docs-checker.yml
index 18b6704772..458e4f69ee 100644
--- a/.github/workflows/docs-checker.yml
+++ b/.github/workflows/docs-checker.yml
@@ -14,7 +14,7 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: 4
 
diff --git a/.github/workflows/file-descriptions.yml b/.github/workflows/file-descriptions.yml
index 7eea502aa7..6233aa0f7e 100644
--- a/.github/workflows/file-descriptions.yml
+++ b/.github/workflows/file-descriptions.yml
@@ -14,7 +14,7 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: 4
 
diff --git a/.github/workflows/preview-build.yml b/.github/workflows/preview-build.yml
index 9c6b929d52..cf3cdc5b42 100644
--- a/.github/workflows/preview-build.yml
+++ b/.github/workflows/preview-build.yml
@@ -15,7 +15,7 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         ref: ${{ github.event.pull_request.head.sha }}
 
@@ -25,7 +25,7 @@ jobs:
         git checkout -b pr${{ github.event.pull_request.number }}
 
     - name: Setup cache
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: /emsdk/upstream/emscripten/cache
         # If you change this version, change the numbers in the image configuration step,
diff --git a/.github/workflows/preview-publish.yml b/.github/workflows/preview-publish.yml
index cdf9de280b..c8fc1ba67a 100644
--- a/.github/workflows/preview-publish.yml
+++ b/.github/workflows/preview-publish.yml
@@ -41,7 +41,7 @@ jobs:
         echo "number=$(cat pr/number)" >> $GITHUB_OUTPUT
 
     - name: Publish preview
-      uses: cloudflare/wrangler-action@v3
+      uses: cloudflare/wrangler-action@v4
       with:
         apiToken: ${{ secrets.PREVIEW_CLOUDFLARE_API_TOKEN }}
         accountId: ${{ secrets.PREVIEW_CLOUDFLARE_ACCOUNT_ID }}
diff --git a/.github/workflows/release-source.yml b/.github/workflows/release-source.yml
index 0672d82102..9a19accd7b 100644
--- a/.github/workflows/release-source.yml
+++ b/.github/workflows/release-source.yml
@@ -30,14 +30,14 @@ jobs:
     steps:
     - name: Checkout (Release)
       if: github.event_name == 'release'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         # We generate a changelog; for this we need the full git log.
         fetch-depth: 0
 
     - name: Checkout (Manual)
       if: github.event_name == 'workflow_dispatch'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         ref: ${{ github.event.inputs.ref }}
         # We generate a changelog; for this we need the full git log.
@@ -45,7 +45,7 @@ jobs:
 
     - name: Checkout (Trigger)
       if: github.event_name == 'repository_dispatch'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         ref: ${{ github.event.client_payload.ref }}
         # We generate a changelog; for this we need the full git log.
diff --git a/.github/workflows/script-missing-mode-enforcement.yml b/.github/workflows/script-missing-mode-enforcement.yml
index e5a2f6517f..514b861c10 100644
--- a/.github/workflows/script-missing-mode-enforcement.yml
+++ b/.github/workflows/script-missing-mode-enforcement.yml
@@ -14,7 +14,7 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Check for finding script functions that require company/deity mode enforcement/checks
       run: |
diff --git a/.github/workflows/unused-strings.yml b/.github/workflows/unused-strings.yml
index e77bb932ca..8abfec9fdc 100644
--- a/.github/workflows/unused-strings.yml
+++ b/.github/workflows/unused-strings.yml
@@ -14,7 +14,7 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Check for unused strings
       run: |