diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index 60ec73f7a..a348b03d5 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -15,10 +15,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4.3.1
+      - uses: actions/checkout@v7.0.1
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4.4.0
+        uses: actions/setup-node@v7.0.0
         with:
           node-version: 24
           cache: npm
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index eb8dfa240..b1d50ac0e 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -38,10 +38,10 @@ jobs:
       contents: read
       id-token: write
     steps:
-      - uses: actions/checkout@v4.3.1
+      - uses: actions/checkout@v7.0.1
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4.4.0
+        uses: actions/setup-node@v7.0.0
         with:
           # node 24 bundles npm 11.16, over the >= 11.5.1 that trusted publishing needs
           node-version: 24
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 362f8e7a0..c8e6b7702 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -12,7 +12,7 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v9.1.0
+      - uses: actions/stale@v10.4.0
         with:
           stale-issue-message: >
             This issue has been automatically marked as inactive due to lack of