diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4a4a563..beb0360 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -21,9 +21,9 @@ jobs:
       matrix:
         node: [20, 22]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: ${{ matrix.node }}
           cache: npm
@@ -44,9 +44,9 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 25
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
           cache: npm
diff --git a/.github/workflows/discover.yml b/.github/workflows/discover.yml
index 3500a7e..e619b16 100644
--- a/.github/workflows/discover.yml
+++ b/.github/workflows/discover.yml
@@ -38,17 +38,17 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 90
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Mint bot token
         id: bot
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@v3
         continue-on-error: true
         with:
           app-id: ${{ vars.BOT_APP_ID }}
           private-key: ${{ secrets.BOT_PRIVATE_KEY }}
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
           cache: npm
diff --git a/.github/workflows/epg.yml b/.github/workflows/epg.yml
index 18ae14a..39fe535 100644
--- a/.github/workflows/epg.yml
+++ b/.github/workflows/epg.yml
@@ -37,7 +37,7 @@ jobs:
     outputs:
       matrix: ${{ steps.sites.outputs.matrix }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - id: sites
         run: |
@@ -70,7 +70,7 @@ jobs:
       - name: Clone the iptv-org grabber
         run: git clone --depth 1 -b master https://github.com/iptv-org/epg.git epg
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
 
@@ -118,7 +118,7 @@ jobs:
             cp guide.xml.gz "out/${{ matrix.slug }}.xml.gz" 2>/dev/null || gzip -9 -c guide.xml > "out/${{ matrix.slug }}.xml.gz"
           fi
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         if: steps.verify.outputs.ok == '1'
         with:
           name: epg-${{ matrix.slug }}
@@ -131,9 +131,9 @@ jobs:
     if: always()
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           path: downloaded
           pattern: epg-*
diff --git a/.github/workflows/health.yml b/.github/workflows/health.yml
index 9d84ea6..9bbaadd 100644
--- a/.github/workflows/health.yml
+++ b/.github/workflows/health.yml
@@ -34,9 +34,9 @@ jobs:
       matrix:
         shard: [0, 1, 2, 3, 4, 5]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
           cache: npm
@@ -65,7 +65,7 @@ jobs:
           if [ "$LIMIT" != "0" ]; then ARGS="$ARGS --limit $LIMIT"; fi
           npm run cli -- health $ARGS
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: health-shard-${{ matrix.shard }}
           path: .data/health.json
@@ -77,16 +77,16 @@ jobs:
     if: always()
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
           cache: npm
 
       - run: npm ci
 
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           path: shards
           pattern: health-shard-*
diff --git a/.github/workflows/sync.yml b/.github/workflows/sync.yml
index 6292d55..eda5a33 100644
--- a/.github/workflows/sync.yml
+++ b/.github/workflows/sync.yml
@@ -46,11 +46,11 @@ jobs:
       channels: ${{ steps.summary.outputs.channels }}
       streams: ${{ steps.summary.outputs.streams }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 1
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
           cache: npm
@@ -60,7 +60,7 @@ jobs:
       # Health history is the memory that makes scores meaningful, so it is
       # restored from the cache and from the state branch.
       - name: Restore state
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: .data
           key: nexus-state-${{ github.run_id }}
@@ -128,7 +128,7 @@ jobs:
           git pull --rebase --quiet origin main || true
           git push origin HEAD:main
 
-      - uses: actions/upload-pages-artifact@v3
+      - uses: actions/upload-pages-artifact@v5
         with:
           path: public
 
@@ -141,4 +141,4 @@ jobs:
       url: ${{ steps.deployment.outputs.page_url }}
     steps:
       - id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5