diff --git a/.github/workflows/comment-deployment-plan-pr.yaml b/.github/workflows/comment-deployment-plan-pr.yaml
index 5ee8636d4..81758ff01 100644
--- a/.github/workflows/comment-deployment-plan-pr.yaml
+++ b/.github/workflows/comment-deployment-plan-pr.yaml
@@ -32,7 +32,7 @@ jobs:
       issues: read
       pull-requests: write
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - run: pip install requests
     - run: python extra-scripts/comment-deployment-plan-pr.py
       env:
diff --git a/.github/workflows/comment-test-link-merged-pr.yaml b/.github/workflows/comment-test-link-merged-pr.yaml
index 21b16e2c1..e89945e92 100644
--- a/.github/workflows/comment-test-link-merged-pr.yaml
+++ b/.github/workflows/comment-test-link-merged-pr.yaml
@@ -20,7 +20,7 @@ jobs:
       actions: read
       pull-requests: write
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - run: pip install requests
     - run: python extra-scripts/comment-test-link-merged-pr.py
       env:
diff --git a/.github/workflows/deploy-grafana-dashboards.yaml b/.github/workflows/deploy-grafana-dashboards.yaml
index 7d1941b3e..2ef655123 100644
--- a/.github/workflows/deploy-grafana-dashboards.yaml
+++ b/.github/workflows/deploy-grafana-dashboards.yaml
@@ -56,9 +56,9 @@ jobs:
         - cluster_name: heliophysics
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
-    - uses: actions/setup-python@v5
+    - uses: actions/setup-python@v6
       with:
         python-version: '3.13'
 
@@ -76,7 +76,7 @@ jobs:
       uses: mdgreenwald/mozilla-sops-action@v1.6.0
 
     - name: Setup sops credentials to decrypt repo secrets
-      uses: google-github-actions/auth@v2
+      uses: google-github-actions/auth@v3
       with:
         credentials_json: ${{ secrets.GCP_KMS_DECRYPTOR_KEY }}
 
diff --git a/.github/workflows/deploy-hubs.yaml b/.github/workflows/deploy-hubs.yaml
index 361c04755..7573a5061 100644
--- a/.github/workflows/deploy-hubs.yaml
+++ b/.github/workflows/deploy-hubs.yaml
@@ -73,12 +73,12 @@ jobs:
       prod-jobs: ${{ steps.generate-jobs.outputs.prod-jobs }}
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
-    - uses: actions/setup-python@v5
+    - uses: actions/setup-python@v6
       with:
         python-version: '3.13'
-    - uses: actions/setup-go@v5
+    - uses: actions/setup-go@v6
 
       # There will almost never be a cache hit on the cache key when this job is
       # run, as it is the first of all jobs in this workflow. An exception is if
@@ -96,7 +96,7 @@ jobs:
         go install github.com/google/go-jsonnet/cmd/jsonnet@v0.20.0
 
     - name: Get merged/open PR labels
-      uses: actions/github-script@v7
+      uses: actions/github-script@v8
       id: pr-labels
       with:
           # Both pull_request and push can have triggered this job to run. A
@@ -255,7 +255,7 @@ jobs:
         jobs: ${{ fromJson(needs.generate-jobs.outputs.support-jobs) }}
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
     - name: Setup deploy for ${{ matrix.jobs.cluster_name }}
       uses: ./.github/actions/setup-deploy
@@ -492,7 +492,7 @@ jobs:
       failure_heliophysics_staging: ${{ steps.declare-failure.outputs.failure_heliophysics_staging }}
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
     - name: Setup deploy for ${{ matrix.jobs.cluster_name }} cluster
       uses: ./.github/actions/setup-deploy
@@ -630,7 +630,7 @@ jobs:
         jobs: ${{ fromJson(needs.filter-failed-staging.outputs.prod-jobs) }}
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
     - name: Setup deploy for ${{ matrix.jobs.cluster_name }} cluster
       uses: ./.github/actions/setup-deploy
diff --git a/.github/workflows/ensure-uptime-checks.yaml b/.github/workflows/ensure-uptime-checks.yaml
index dd0286ee4..3eb9ef634 100644
--- a/.github/workflows/ensure-uptime-checks.yaml
+++ b/.github/workflows/ensure-uptime-checks.yaml
@@ -28,7 +28,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
       # Uptime checks are set up and managed via terraform
     - uses: hashicorp/setup-terraform@v3
@@ -40,7 +40,7 @@ jobs:
 
       # Authenticate with the correct KMS key that sops will use.
     - name: Setup sops credentials to decrypt repo secrets
-      uses: google-github-actions/auth@v2
+      uses: google-github-actions/auth@v3
       with:
         credentials_json: ${{ secrets.GCP_KMS_DECRYPTOR_KEY }}
 
diff --git a/.github/workflows/terraform-lint.yaml b/.github/workflows/terraform-lint.yaml
index ecd656206..e02c518c1 100644
--- a/.github/workflows/terraform-lint.yaml
+++ b/.github/workflows/terraform-lint.yaml
@@ -9,9 +9,9 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - uses: hashicorp/setup-terraform@v3
-    - uses: terraform-linters/setup-tflint@v4
+    - uses: terraform-linters/setup-tflint@v5
     - name: Run terraform linter
       run: |
         cd terraform
diff --git a/.github/workflows/test-deployer-code.yaml b/.github/workflows/test-deployer-code.yaml
index b7d36271a..e509032d6 100644
--- a/.github/workflows/test-deployer-code.yaml
+++ b/.github/workflows/test-deployer-code.yaml
@@ -27,8 +27,8 @@ jobs:
   test-deployer:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-python@v5
+    - uses: actions/checkout@v5
+    - uses: actions/setup-python@v6
       with:
         python-version: '3.13'
     - name: Install dependencies
diff --git a/.github/workflows/test-docs.yaml b/.github/workflows/test-docs.yaml
index b663ae5e5..86f696f5a 100644
--- a/.github/workflows/test-docs.yaml
+++ b/.github/workflows/test-docs.yaml
@@ -21,10 +21,10 @@ jobs:
   test-docs:
     runs-on: ubuntu-22.04
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       with:
         fetch-depth: 0
-    - uses: actions/setup-python@v5
+    - uses: actions/setup-python@v6
       with:
         python-version: '3.13'
 
diff --git a/.github/workflows/validate-clusters.yaml b/.github/workflows/validate-clusters.yaml
index 53e31a5ab..8671e6faa 100644
--- a/.github/workflows/validate-clusters.yaml
+++ b/.github/workflows/validate-clusters.yaml
@@ -79,8 +79,8 @@ jobs:
       (github.event_name == 'pull_request' && contains(github.head_ref, fromJson('["dependabot", "pre-commit"]')) == false)
 
     steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-python@v5
+    - uses: actions/checkout@v5
+    - uses: actions/setup-python@v6
       with:
         python-version: '3.13'
 
@@ -210,11 +210,11 @@ jobs:
         jobs: ${{ fromJson(needs.generate-clusters-to-validate.outputs.cluster_matrix) }}
 
     steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-python@v5
+    - uses: actions/checkout@v5
+    - uses: actions/setup-python@v6
       with:
         python-version: '3.13'
-    - uses: actions/setup-go@v5
+    - uses: actions/setup-go@v6
 
     - name: Install deployer module dependencies
       run: |