diff --git a/.github/workflows/go-inference-api-ci.yml b/.github/workflows/go-inference-api-ci.yml
index 1f5d05d..910bfbb 100644
--- a/.github/workflows/go-inference-api-ci.yml
+++ b/.github/workflows/go-inference-api-ci.yml
@@ -39,7 +39,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version-file: services/inference-api/go.mod
           cache: false
diff --git a/.github/workflows/native-bridge-ci.yml b/.github/workflows/native-bridge-ci.yml
index e9d2365..8e2fc09 100644
--- a/.github/workflows/native-bridge-ci.yml
+++ b/.github/workflows/native-bridge-ci.yml
@@ -82,7 +82,7 @@ jobs:
 
       - name: Cache pinned llama.cpp CPU build
         id: llama-cache
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: vendor/llama.cpp/build
           key: llama-${{ runner.os }}-${{ env.LLAMA_CPP_COMMIT }}-cpu-shared-v2
@@ -202,7 +202,7 @@ jobs:
 
       - name: Upload native model smoke report
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: native-model-smoke-linux
           path: native-model-smoke.json
@@ -210,7 +210,7 @@ jobs:
           retention-days: 7
 
       - name: Setup Go for native service integration
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version-file: services/inference-api/go.mod
           cache: false
@@ -235,7 +235,7 @@ jobs:
         run: go test -race ./...
 
       - name: Setup Python for adapter integration
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: "3.12"
 
diff --git a/.github/workflows/native-vulkan-ci.yml b/.github/workflows/native-vulkan-ci.yml
index 49df322..3684f65 100644
--- a/.github/workflows/native-vulkan-ci.yml
+++ b/.github/workflows/native-vulkan-ci.yml
@@ -56,7 +56,7 @@ jobs:
 
       - name: Cache pinned Vulkan SDK
         id: vulkan-cache
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: ${{ runner.temp }}/OpenMindAI-VulkanSDK
           key: vulkan-sdk-windows-x64-${{ env.VULKAN_SDK_VERSION }}
@@ -94,7 +94,7 @@ jobs:
 
       - name: Cache pinned llama.cpp Vulkan build
         id: llama-vulkan-cache
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: vendor/llama.cpp/build-vulkan
           key: llama-${{ runner.os }}-${{ env.LLAMA_CPP_COMMIT }}-vulkan-${{ env.VULKAN_SDK_VERSION }}-dynamic-v1
@@ -265,7 +265,7 @@ jobs:
           Copy-Item services/native-worker/target/release/openmind-native-worker.exe native-vulkan-artifact
 
       - name: Upload Vulkan runtime probe artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: openmindai-native-vulkan-${{ env.LLAMA_CPP_COMMIT }}
           path: native-vulkan-artifact
@@ -282,7 +282,7 @@ jobs:
 
       # Fresh runner: no llama build tree, cached SDK, Rust tools or exported PATH.
       - name: Download the packaged Vulkan runtime
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           name: openmindai-native-vulkan-${{ env.LLAMA_CPP_COMMIT }}
           path: native-vulkan-artifact
@@ -300,7 +300,7 @@ jobs:
 
       - name: Upload Windows model smoke reports
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: native-model-smoke-windows
           path: native-smoke-reports
diff --git a/.github/workflows/nemotron-live-qualification.yml b/.github/workflows/nemotron-live-qualification.yml
index a3b6612..cc89f01 100644
--- a/.github/workflows/nemotron-live-qualification.yml
+++ b/.github/workflows/nemotron-live-qualification.yml
@@ -57,7 +57,7 @@ jobs:
 
       - name: Upload qualification report
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: nemotron-e2e-report
           path: nemotron-e2e-report.json
diff --git a/.github/workflows/project-workspace-preflight.yml b/.github/workflows/project-workspace-preflight.yml
index 6c615b5..fb2af6c 100644
--- a/.github/workflows/project-workspace-preflight.yml
+++ b/.github/workflows/project-workspace-preflight.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v7
         with:
           node-version: 24
           cache: npm
@@ -41,7 +41,7 @@ jobs:
     runs-on: windows-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v7
         with:
           node-version: 24
           cache: npm
diff --git a/.github/workflows/python-experiments-ci.yml b/.github/workflows/python-experiments-ci.yml
index 551b7ea..a95b2fd 100644
--- a/.github/workflows/python-experiments-ci.yml
+++ b/.github/workflows/python-experiments-ci.yml
@@ -27,7 +27,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: "3.12"
 
diff --git a/.github/workflows/release-readiness.yml b/.github/workflows/release-readiness.yml
index 2f2d0dc..b5a7e40 100644
--- a/.github/workflows/release-readiness.yml
+++ b/.github/workflows/release-readiness.yml
@@ -67,7 +67,7 @@ jobs:
 
       - name: Cache pinned llama.cpp Windows CPU build
         id: llama-cache
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: vendor/llama.cpp/build
           key: llama-${{ runner.os }}-${{ env.LLAMA_CPP_COMMIT }}-cpu-shared-v2
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8307498..0da9455 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -45,7 +45,7 @@ jobs:
 
       - name: Cache pinned llama.cpp Windows CPU build
         id: llama-cache
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: vendor/llama.cpp/build
           key: llama-${{ runner.os }}-${{ env.LLAMA_CPP_COMMIT }}-cpu-shared-v2