diff --git a/.github/workflows/_reusable-ui-smoke-tests.yml b/.github/workflows/_reusable-ui-smoke-tests.yml
index 2cf01a0..5efb189 100644
--- a/.github/workflows/_reusable-ui-smoke-tests.yml
+++ b/.github/workflows/_reusable-ui-smoke-tests.yml
@@ -65,14 +65,14 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Select Xcode
         id: xcode
         uses: ./.github/actions/xcode-select
 
       - name: Cache Xcode metadata
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             .derivedData/SourcePackages
@@ -190,7 +190,7 @@ jobs:
 
       - name: Upload UI smoke test result bundle
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ui-smoke-tests-xcresult-${{ inputs.artifact_name_suffix }}
           path: UISmokeTests.xcresult
@@ -199,7 +199,7 @@ jobs:
 
       - name: Upload UI smoke failure summary
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ui-smoke-summary-${{ inputs.artifact_name_suffix }}
           path: |
diff --git a/.github/workflows/_reusable-unit-tests.yml b/.github/workflows/_reusable-unit-tests.yml
index 50b9c1d..2760859 100644
--- a/.github/workflows/_reusable-unit-tests.yml
+++ b/.github/workflows/_reusable-unit-tests.yml
@@ -33,14 +33,14 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Select Xcode
         id: xcode
         uses: ./.github/actions/xcode-select
 
       - name: Cache Xcode metadata
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             .derivedData/SourcePackages
@@ -70,7 +70,7 @@ jobs:
 
       - name: Upload unit test result bundle
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: unit-tests-xcresult
           path: UnitTests.xcresult
@@ -78,7 +78,7 @@ jobs:
 
       - name: Upload coverage report
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: unit-tests-coverage-report
           path: docs/testing/coverage-latest.json
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 71eb0c0..de7f224 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -123,7 +123,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Select Xcode
         uses: ./.github/actions/xcode-select
@@ -235,6 +235,7 @@ jobs:
     permissions:
       contents: read
       issues: write
+      pull-requests: write
     steps:
       - name: Render summary and update PR sticky comment
         uses: actions/github-script@v8
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5bd58df..267b4bb 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -40,7 +40,7 @@ jobs:
           fi
 
       - name: Checkout target ref
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ inputs.target_ref }}
           fetch-depth: 0
@@ -81,7 +81,7 @@ jobs:
             arch: x86_64
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Select Xcode
         uses: ./.github/actions/xcode-select
@@ -141,7 +141,7 @@ jobs:
           shasum -a 256 "release-assets/${dmg_name}" > "release-assets/${dmg_name}.sha256"
 
       - name: Upload DMG artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: release-dmg-${{ matrix.label }}
           path: |