diff --git a/.github/workflows/code-coverage.yaml b/.github/workflows/code-coverage.yaml
index b2c42453..4ac5dad5 100644
--- a/.github/workflows/code-coverage.yaml
+++ b/.github/workflows/code-coverage.yaml
@@ -7,8 +7,8 @@ jobs:
     runs-on: ubuntu-latest
     name: Solidity code coverage
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v6.0.2
+      - uses: actions/setup-node@v6.3.0
         with:
           node-version: '22.x'
       - run: npm ci
diff --git a/.github/workflows/echidna.yaml b/.github/workflows/echidna.yaml
index 0f82457d..2f2790c6 100644
--- a/.github/workflows/echidna.yaml
+++ b/.github/workflows/echidna.yaml
@@ -16,7 +16,7 @@ jobs:
       contracts: ${{ steps.discover.outputs.contracts }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6.0.2
         with:
           submodules: recursive
 
@@ -44,12 +44,12 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6.0.2
         with:
           submodules: recursive
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6.3.0
         with:
           node-version: '22.x'
           cache: 'npm'
@@ -72,7 +72,7 @@ jobs:
           test-mode: property
 
       - name: Upload corpus
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         if: always()
         with:
           name: echidna-corpus-${{ matrix.contract }}
diff --git a/.github/workflows/linter.yaml b/.github/workflows/linter.yaml
index 968e4309..5bce38f3 100644
--- a/.github/workflows/linter.yaml
+++ b/.github/workflows/linter.yaml
@@ -8,8 +8,8 @@ jobs:
     runs-on: ubuntu-latest
     name: Solidity linter
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v6.0.2
+      - uses: actions/setup-node@v6.3.0
         with:
           node-version: '22.x'
       - run: npm ci
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 765bf835..6aeb52b3 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -8,9 +8,9 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6.0.2
       - name: Use Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6.3.0
         with:
           node-version: '22.x'
           registry-url: 'https://registry.npmjs.org'
diff --git a/.github/workflows/slither.yaml b/.github/workflows/slither.yaml
index b9840586..545a3137 100644
--- a/.github/workflows/slither.yaml
+++ b/.github/workflows/slither.yaml
@@ -5,10 +5,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6.0.2
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6.3.0
         with:
           node-version: '22.x'
 
@@ -21,7 +21,7 @@ jobs:
         run: npx hardhat compile --force
 
       - name: Run Slither
-        uses: crytic/slither-action@v0.3.2
+        uses: crytic/slither-action@v0.4.2
         id: slither
         with:
           fail-on: high
diff --git a/.github/workflows/tests-forked.yaml b/.github/workflows/tests-forked.yaml
index 729deacf..d63be9b7 100644
--- a/.github/workflows/tests-forked.yaml
+++ b/.github/workflows/tests-forked.yaml
@@ -12,9 +12,8 @@ jobs:
       HOODI_RPC_URL: ${{ secrets.hoodi_rpc_url }}
       MAINNET_RPC_URL: ${{ secrets.mainnet_rpc_url }}
     steps:
-      - uses: actions/checkout@v4
-
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v6.0.2
+      - uses: actions/setup-node@v6.3.0
         with:
           node-version: '22.x'
           cache: 'npm'
diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index 8cc13825..7ee2d427 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -7,9 +7,8 @@ jobs:
     runs-on: ubuntu-latest
     name: Hardhat unit test
     steps:
-      - uses: actions/checkout@v4
-
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v6.0.2
+      - uses: actions/setup-node@v6.3.0
         with:
           node-version: '22.x'
           cache: 'npm'
@@ -39,14 +38,14 @@ jobs:
         continue-on-error: false
 
       - name: Upload gas report
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: gas-report
           path: gas-report.json
           retention-days: 30
 
       - name: Upload gas comparison report
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: gas-compare
           path: gas-compare.txt
@@ -54,7 +53,7 @@ jobs:
 
       - name: Comment on PR with gas report
         if: github.event_name == 'pull_request'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const fs = require('fs');