diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml
index 2ec4b3a..e3cc9c0 100644
--- a/.github/workflows/claude-code-review.yml
+++ b/.github/workflows/claude-code-review.yml
@@ -26,7 +26,7 @@ jobs:
     steps:
       - name: Validate PR context
         id: validate
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           github-token: ${{ github.token }}
           script: |
@@ -50,7 +50,7 @@ jobs:
 
       - name: Get PR details
         id: pr
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           github-token: ${{ github.token }}
           script: |
@@ -97,7 +97,7 @@ jobs:
 
       - name: Post skip message
         if: steps.skip.outputs.skip == 'true'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           github-token: ${{ github.token }}
           script: |
@@ -110,7 +110,7 @@ jobs:
 
       - name: Acknowledge review request
         if: steps.skip.outputs.skip != 'true'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           github-token: ${{ github.token }}
           script: |
@@ -125,7 +125,7 @@ jobs:
 
       - name: Checkout PR branch
         if: steps.skip.outputs.skip != 'true'
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: refs/pull/${{ steps.pr.outputs.number }}/merge
           fetch-depth: 0
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index b1592da..50db349 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0 # Full history for lastUpdated timestamps
 
@@ -34,7 +34,7 @@ jobs:
           install-command: npm ci
 
       - name: Setup Pages
-        uses: actions/configure-pages@v5
+        uses: actions/configure-pages@v6
 
       - name: Build with VitePress
         env:
@@ -42,7 +42,7 @@ jobs:
         run: npm run docs:build
 
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@v5
         with:
           path: docs/.vitepress/dist
 
@@ -55,4 +55,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5
diff --git a/.github/workflows/e2e-test.yml b/.github/workflows/e2e-test.yml
index 6648cbe..a6e61a7 100644
--- a/.github/workflows/e2e-test.yml
+++ b/.github/workflows/e2e-test.yml
@@ -35,7 +35,7 @@ jobs:
       skip_burn_in: ${{ steps.check_skip_label.outputs.skip_burn_in || 'false' }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ github.head_ref }}
 
@@ -83,7 +83,7 @@ jobs:
     steps:
       # Always check out code first before using any local actions
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ github.head_ref }}
           
@@ -136,7 +136,7 @@ jobs:
           cp -r test-results/**/*.zip blob-report/trace || true
 
       - name: Upload shared blob report
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         if: always()
         with:
           name: blob-report-${{ matrix.shardIndex }}
@@ -153,7 +153,7 @@ jobs:
       pull-requests: write  # Required for posting PR comments
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Setup Node and Install Dependencies
         uses: ./.github/actions/install
diff --git a/.github/workflows/gitleaks-check.yml b/.github/workflows/gitleaks-check.yml
index 0631a92..ad59ddf 100644
--- a/.github/workflows/gitleaks-check.yml
+++ b/.github/workflows/gitleaks-check.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/pr-checks.yml b/.github/workflows/pr-checks.yml
index f7caa65..5272d94 100644
--- a/.github/workflows/pr-checks.yml
+++ b/.github/workflows/pr-checks.yml
@@ -15,15 +15,15 @@ jobs:
   pr-check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version-file: '.nvmrc'
           cache: 'npm'
 
       - name: Cache node modules
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.npm
           key: npm-${{ runner.os }}-${{ hashFiles('**/package-lock.json') }}
diff --git a/.github/workflows/pr-gate.yml b/.github/workflows/pr-gate.yml
index 1ae146d..1b86db1 100644
--- a/.github/workflows/pr-gate.yml
+++ b/.github/workflows/pr-gate.yml
@@ -12,7 +12,7 @@ jobs:
     name: gate
     runs-on: ubuntu-latest
     steps:
-      - uses: kachick/wait-other-jobs@v3
+      - uses: kachick/wait-other-jobs@v4
         with:
           skip-same-workflow: true
           skip-list: |
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 741fe2e..d24e1b9 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -29,13 +29,13 @@ jobs:
     steps:
       # 1. Checkout the repository
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0 # Needed for version calculation
 
       # 2. Setup Node.js with caching
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: '.nvmrc' # Verified correct for v4
           registry-url: 'https://registry.npmjs.org'
@@ -124,7 +124,7 @@ jobs:
       # 9. Setup Node for npmjs.org and publish
       - name: Setup Node.js for npmjs.org
         if: steps.version.outputs.skip != 'true'
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: '.nvmrc'
           registry-url: 'https://registry.npmjs.org'
@@ -156,7 +156,7 @@ jobs:
       # 10. Setup Node for GitHub Packages and publish
       - name: Setup Node.js for GitHub Packages
         if: steps.version.outputs.skip != 'true'
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: '.nvmrc'
           registry-url: 'https://npm.pkg.github.com'
diff --git a/.github/workflows/rwf-burn-in.yml b/.github/workflows/rwf-burn-in.yml
index 6ab1fb3..37f53b3 100644
--- a/.github/workflows/rwf-burn-in.yml
+++ b/.github/workflows/rwf-burn-in.yml
@@ -51,7 +51,7 @@ jobs:
     steps:
       # Always check out code first before using any local actions
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: "0"
@@ -136,7 +136,7 @@ jobs:
       # Upload burn-in report on failure for debugging
       - name: Upload burn-in report
         if: always() && steps.detect-changed.outputs.changed == 'true' && steps.burn-in-step.outcome == 'failure'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: burn-in-report
           path: |
@@ -148,7 +148,7 @@ jobs:
       - name: Resolve artifact URL
         id: resolve-url
         if: always() && steps.detect-changed.outputs.changed == 'true' && steps.burn-in-step.outcome == 'failure'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const artifactName = 'burn-in-report';
@@ -170,7 +170,7 @@ jobs:
 
       - name: Comment burn-in result on PR
         if: always() && github.event_name == 'pull_request' && steps.detect-changed.outputs.changed == 'true'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const burnInOutcome = '${{ steps.burn-in-step.outcome }}';
diff --git a/.github/workflows/vitest-ct.yml b/.github/workflows/vitest-ct.yml
index eb49b40..0ff7112 100644
--- a/.github/workflows/vitest-ct.yml
+++ b/.github/workflows/vitest-ct.yml
@@ -19,9 +19,9 @@ jobs:
     timeout-minutes: 10
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version-file: '.nvmrc'
           cache: 'npm'
@@ -44,7 +44,7 @@ jobs:
 
       - name: Cache Playwright browsers
         id: pw-cache
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.cache/ms-playwright
           key: playwright-${{ runner.os }}-${{ steps.pw-version.outputs.version }}