diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
index 9cbfa799a7..5a8873d4dc 100644
--- a/.github/workflows/auto-merge.yml
+++ b/.github/workflows/auto-merge.yml
@@ -23,7 +23,7 @@ jobs:
       - name: Dependabot metadata
         if: github.actor == 'dependabot[bot]'
         id: metadata
-        uses: dependabot/fetch-metadata@v2
+        uses: dependabot/fetch-metadata@v3
         with:
           github-token: ${{ steps.app-token.outputs.token }}
 
diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml
index 1c5175a7d9..37c51feb7c 100644
--- a/.github/workflows/copilot-setup-steps.yml
+++ b/.github/workflows/copilot-setup-steps.yml
@@ -18,7 +18,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      - uses: pnpm/action-setup@v5
+      - uses: pnpm/action-setup@v6
 
       - name: Setup Node
         uses: actions/setup-node@v6
diff --git a/.github/workflows/pr-reports.yml b/.github/workflows/pr-reports.yml
index b57a992623..bbda40a232 100644
--- a/.github/workflows/pr-reports.yml
+++ b/.github/workflows/pr-reports.yml
@@ -23,7 +23,7 @@ jobs:
     steps:
       - name: Check for all artifacts
         id: check
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const artifacts = await github.rest.actions.listWorkflowRunArtifacts({
diff --git a/.github/workflows/pr-validation.yml b/.github/workflows/pr-validation.yml
index ae4b8eba1d..9ffc902479 100644
--- a/.github/workflows/pr-validation.yml
+++ b/.github/workflows/pr-validation.yml
@@ -19,7 +19,7 @@ jobs:
 
       # Inline setup - required for fork PR compatibility
       # Cannot use ./.github/actions/setup-pnpm as it won't work from forks
-      - uses: pnpm/action-setup@v5
+      - uses: pnpm/action-setup@v6
 
       - name: Setup Node
         uses: actions/setup-node@v6
@@ -58,7 +58,7 @@ jobs:
       - uses: actions/checkout@v6
 
       # Inline setup - required for fork PR compatibility
-      - uses: pnpm/action-setup@v5
+      - uses: pnpm/action-setup@v6
 
       - name: Setup Node
         uses: actions/setup-node@v6
@@ -120,7 +120,7 @@ jobs:
       - uses: actions/checkout@v6
 
       # Inline setup - required for fork PR compatibility
-      - uses: pnpm/action-setup@v5
+      - uses: pnpm/action-setup@v6
 
       - name: Setup Node
         uses: actions/setup-node@v6