diff --git a/.github/workflows/auto-review.yaml b/.github/workflows/auto-review.yaml
index 3bc3f4dbc..8166bc014 100644
--- a/.github/workflows/auto-review.yaml
+++ b/.github/workflows/auto-review.yaml
@@ -19,13 +19,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Use Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
       - name: Get AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4.3.1
+        uses: aws-actions/configure-aws-credentials@v5.1.1
         with:
           role-to-assume: ${{ secrets.INFERENCE_AWS_ROLE_ARN }}
           role-duration-seconds: 1800
@@ -50,7 +50,7 @@ jobs:
 
           yarn prettier --write "$target_directory"
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
         with:
           title: "chore: Automated review of ${{ github.event.inputs.directory }}"
           branch: "automated-review/${{ github.event.inputs.directory }}"
diff --git a/.github/workflows/module-test.yaml b/.github/workflows/module-test.yaml
index d9dff0311..84338a2c6 100644
--- a/.github/workflows/module-test.yaml
+++ b/.github/workflows/module-test.yaml
@@ -27,7 +27,7 @@ jobs:
       durations-artifact: ${{ steps.upload-durations.outputs.artifact-id }}
     steps:
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Install utilities
         run: |
           sudo apt install -y gettext
@@ -49,7 +49,7 @@ jobs:
           echo "Using cluster ID ${CLUSTER_ID}"
           echo "CLUSTER_ID=$CLUSTER_ID" >> $GITHUB_ENV
       - name: Get AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4.3.1
+        uses: aws-actions/configure-aws-credentials@v5.1.1
         with:
           role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
           role-duration-seconds: 3600
@@ -63,7 +63,7 @@ jobs:
           make create-infrastructure environment="$CLUSTER_ID"
       - name: Refresh AWS credentials
         if: always()
-        uses: aws-actions/configure-aws-credentials@v4.3.1
+        uses: aws-actions/configure-aws-credentials@v5.1.1
         with:
           role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
           role-duration-seconds: 3600
@@ -82,14 +82,14 @@ jobs:
         run: |
           export AWS_DEFAULT_REGION="$AWS_REGION"
           bash hack/run-tests.sh "$CLUSTER_ID" "$MODULE" "$GLOB"
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v6
         id: upload-durations
         with:
           name: test-durations-${{ env.CLUSTER_ID }}
           path: website/test-durations.json
       - name: Refresh AWS credentials
         if: always()
-        uses: aws-actions/configure-aws-credentials@v4.3.1
+        uses: aws-actions/configure-aws-credentials@v5.1.1
         with:
           role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
           role-duration-seconds: 3600
@@ -106,7 +106,7 @@ jobs:
           make test environment="$CLUSTER_ID" module="cleanup"
       - name: Refresh AWS credentials
         if: always()
-        uses: aws-actions/configure-aws-credentials@v4.3.1
+        uses: aws-actions/configure-aws-credentials@v5.1.1
         with:
           role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
           role-duration-seconds: 3600
diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml
index cfb7eeb41..5a2219773 100644
--- a/.github/workflows/pr.yaml
+++ b/.github/workflows/pr.yaml
@@ -21,11 +21,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Use Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
       - name: Get kubectl version
         run: |
           source hack/lib/kubectl-version.sh
@@ -46,7 +46,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Make shell
         env:
           SKIP_CREDENTIALS: 1
@@ -57,17 +57,17 @@ jobs:
     name: "Pre-commit hooks"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Use Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 22
-      - uses: actions/setup-python@v5
+          node-version: 24
+      - uses: actions/setup-python@v6
       - uses: hashicorp/setup-terraform@v3
         with:
           terraform_version: "~1.9.0"
       - name: Setup TFLint
-        uses: terraform-linters/setup-tflint@v5
+        uses: terraform-linters/setup-tflint@v6
       - name: Setup terraform-docs
         uses: jaxxstorm/action-install-gh-release@v2.1.0
         with:
@@ -81,7 +81,7 @@ jobs:
     name: "Validate Terraform"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: hashicorp/setup-terraform@v3
         with:
           terraform_version: "~1.9.0"
@@ -109,7 +109,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check for content label
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const labels = context.payload.pull_request.labels;
diff --git a/.github/workflows/publish-content.yaml b/.github/workflows/publish-content.yaml
index 1efe1e45c..d7f53f578 100644
--- a/.github/workflows/publish-content.yaml
+++ b/.github/workflows/publish-content.yaml
@@ -16,11 +16,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Use Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
       - name: Get kubectl version
         run: |
           source hack/lib/kubectl-version.sh
@@ -31,7 +31,7 @@ jobs:
           version: "${{ env.KUBECTL_VERSION }}"
         id: install
       - name: Get AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4.3.1
+        uses: aws-actions/configure-aws-credentials@v5.1.1
         with:
           role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
           role-duration-seconds: 900
diff --git a/.github/workflows/publish-preview.yaml b/.github/workflows/publish-preview.yaml
index 5f195a1e5..f135a7d5c 100644
--- a/.github/workflows/publish-preview.yaml
+++ b/.github/workflows/publish-preview.yaml
@@ -16,11 +16,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Use Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
       - name: Get kubectl version
         run: |
           source hack/lib/kubectl-version.sh
@@ -31,7 +31,7 @@ jobs:
           version: "${{ env.KUBECTL_VERSION }}"
         id: install
       - name: Get AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4.3.1
+        uses: aws-actions/configure-aws-credentials@v5.1.1
         with:
           role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
           role-duration-seconds: 900
diff --git a/.github/workflows/publish-snapshot.yaml b/.github/workflows/publish-snapshot.yaml
index af2bcaa32..52c0d8704 100644
--- a/.github/workflows/publish-snapshot.yaml
+++ b/.github/workflows/publish-snapshot.yaml
@@ -16,11 +16,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Use Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
       - name: Get kubectl version
         run: |
           source hack/lib/kubectl-version.sh
@@ -31,7 +31,7 @@ jobs:
           version: "${{ env.KUBECTL_VERSION }}"
         id: install
       - name: Get AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4.3.1
+        uses: aws-actions/configure-aws-credentials@v5.1.1
         with:
           role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
           role-duration-seconds: 900
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 496e7730d..cce45c2f6 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -14,15 +14,15 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           fetch-tags: true
           submodules: recursive
       - name: Use Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
       - name: Get kubectl version
         run: |
           source hack/lib/kubectl-version.sh
@@ -33,7 +33,7 @@ jobs:
           version: "${{ env.KUBECTL_VERSION }}"
         id: install
       - name: Get AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4.3.1
+        uses: aws-actions/configure-aws-credentials@v5.1.1
         with:
           role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
           role-duration-seconds: 900
diff --git a/.github/workflows/test-cleanup.yaml b/.github/workflows/test-cleanup.yaml
index 314bd0255..31a2cf525 100644
--- a/.github/workflows/test-cleanup.yaml
+++ b/.github/workflows/test-cleanup.yaml
@@ -17,15 +17,15 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v5
-      - uses: actions/setup-node@v4
+        uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
         with:
           node-version: "17"
       - name: Install utilities
         run: |
           sudo apt install -y gettext
       - name: Get AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4.3.1
+        uses: aws-actions/configure-aws-credentials@v5.1.1
         with:
           role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
           role-duration-seconds: 3600
diff --git a/.github/workflows/test-cloudformation.yaml b/.github/workflows/test-cloudformation.yaml
index 10ddfaf8c..308dbf293 100644
--- a/.github/workflows/test-cloudformation.yaml
+++ b/.github/workflows/test-cloudformation.yaml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Set cluster ID
         env:
           RUN_ID: "${{ github.job }}"
@@ -28,7 +28,7 @@ jobs:
       - name: Set branch name
         run: echo "TEST_BRANCH=${GITHUB_HEAD_REF:-${GITHUB_REF#refs/heads/}}" >> $GITHUB_ENV
       - name: Get AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4.3.1
+        uses: aws-actions/configure-aws-credentials@v5.1.1
         with:
           role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
           role-duration-seconds: 3600
diff --git a/.github/workflows/test-util-ci.yml b/.github/workflows/test-util-ci.yml
index 4e02c61f5..248495b04 100644
--- a/.github/workflows/test-util-ci.yml
+++ b/.github/workflows/test-util-ci.yml
@@ -13,11 +13,11 @@ jobs:
     name: Test Utility CI
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - name: Use Node.js ${{ env.node_version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ env.node_version }}
           registry-url: "https://registry.npmjs.org"