diff --git a/.github/workflows/build-gems.yml b/.github/workflows/build-gems.yml
index a52e515ae..81c5812d2 100644
--- a/.github/workflows/build-gems.yml
+++ b/.github/workflows/build-gems.yml
@@ -38,7 +38,7 @@ jobs:
       matrix:
         ruby-platform: ${{ fromJSON(needs.ci-data.outputs.result).supported-ruby-platforms }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.ref || github.ref }}
 
@@ -80,7 +80,7 @@ jobs:
           path: ${{ steps.cross-gem.outputs.gem-path }}
           if-no-files-found: error
 
-      - uses: rubygems/configure-rubygems-credentials@v1.0.0
+      - uses: rubygems/configure-rubygems-credentials@v2.1.0
         if: ${{ inputs.publish }}
 
       - run: gem push "${{ steps.cross-gem.outputs.gem-path }}"
@@ -91,12 +91,12 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ inputs.publish }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.ref || github.ref }}
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: "3.4"
-      - uses: rubygems/configure-rubygems-credentials@v1.0.0
+      - uses: rubygems/configure-rubygems-credentials@v2.1.0
       - run: gem build
       - run: gem push ruby_wasm-*.gem
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 1274f7981..b6d74ee9c 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-24.04
     if: ${{ github.event_name == 'pull_request' }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - uses: ruby/setup-ruby@v1
@@ -54,20 +54,20 @@ jobs:
           - { target: wasm32-unknown-emscripten }
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.ref }}
-      - uses: docker/setup-buildx-action@v3
-      - uses: docker/login-action@v3
+      - uses: docker/setup-buildx-action@v4
+      - uses: docker/login-action@v4
         with:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
           registry: ghcr.io
-      - uses: docker/metadata-action@v5
+      - uses: docker/metadata-action@v6
         id: meta
         with:
           images: ghcr.io/${{ github.repository_owner }}/ruby.wasm/builder/${{ matrix.entry.target }}
-      - uses: docker/build-push-action@v5
+      - uses: docker/build-push-action@v7
         with:
           context: builders/${{ matrix.entry.target }}
           push: ${{ github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/') }}
@@ -79,7 +79,7 @@ jobs:
     outputs:
       entries: ${{ steps.set-matrix.outputs.entries }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.ref }}
       - uses: ruby/setup-ruby@v1
@@ -108,20 +108,20 @@ jobs:
     needs: [build-rake-task-matrix]
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.ref }}
           submodules: true
       - uses: actions/download-artifact@v8
         with:
           name: build-manifest
-      - uses: actions/cache@v5.0.3
+      - uses: actions/cache@v6.1.0
         if: ${{ matrix.entry.rubies_cache_key != null }}
         with:
           path: ./rubies
           key: ${{ matrix.entry.rubies_cache_key }}
-      - uses: docker/setup-buildx-action@v3
-      - uses: docker/build-push-action@v5
+      - uses: docker/setup-buildx-action@v4
+      - uses: docker/build-push-action@v7
         id: builder-image
         env:
           DOCKER_BUILD_NO_SUMMARY: true
@@ -158,7 +158,7 @@ jobs:
         with:
           ruby-version: "3.4.1"
           bundler-cache: false
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         if: ${{ matrix.entry.test != '' }}
         with:
           node-version: "22.20.0"
@@ -176,7 +176,7 @@ jobs:
       id-token: write # Required for OIDC
       contents: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.ref }}
       - uses: actions/download-artifact@v8
@@ -185,7 +185,7 @@ jobs:
       - uses: actions/download-artifact@v8
         with:
           path: release
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: 24
           registry-url: https://registry.npmjs.org/
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index dd28febb6..9a7d6e506 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -21,18 +21,18 @@ jobs:
     env:
       HUGO_VERSION: 0.102.3
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: '3.1'
           bundler-cache: true
       - name: Setup Pages
         id: pages
-        uses: actions/configure-pages@v5
+        uses: actions/configure-pages@v6
       - name: Build HTML
         run: rake doc
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v4
+        uses: actions/upload-pages-artifact@v5
         with:
           path: ./html
 
@@ -45,5 +45,5 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5
 
diff --git a/.github/workflows/prune-caches.yml b/.github/workflows/prune-caches.yml
index 09c613e13..e8f7b26b1 100644
--- a/.github/workflows/prune-caches.yml
+++ b/.github/workflows/prune-caches.yml
@@ -13,7 +13,7 @@ jobs:
   prune:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - run: rake ci:prune_caches
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index cc911d705..349700f75 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -28,7 +28,7 @@ jobs:
     outputs:
       tag-name: ${{ steps.generate-tag.outputs.TAG_NAME }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: git config
         run: |
           git config --local user.email "action@github.com"
@@ -109,13 +109,13 @@ jobs:
       id-token: write
       packages: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ needs.create-tag.outputs.tag-name || github.ref_name }}
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: "3.4"
-      - uses: rubygems/configure-rubygems-credentials@v1.0.0
+      - uses: rubygems/configure-rubygems-credentials@v2.1.0
       - run: |
           cd packages/gems/js
           gem build