diff --git a/.github/workflows/linting.yml b/.github/workflows/linting.yml
index 54c6d0d..d144df7 100644
--- a/.github/workflows/linting.yml
+++ b/.github/workflows/linting.yml
@@ -10,8 +10,8 @@ jobs:
   actionlint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: stellar/binaries@v30
+      - uses: actions/checkout@v7
+      - uses: stellar/binaries@v85
         with:
           name: actionlint
           version: 1.7.1
diff --git a/.github/workflows/rust-bump-version.yml b/.github/workflows/rust-bump-version.yml
index 80fe144..11c3e07 100644
--- a/.github/workflows/rust-bump-version.yml
+++ b/.github/workflows/rust-bump-version.yml
@@ -22,10 +22,10 @@ jobs:
   bump-version:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v7
     - uses: stellar/actions/rust-cache@main
     - run: rustup update
-    - uses: stellar/binaries@v21
+    - uses: stellar/binaries@v85
       with:
         name: cargo-edit
         version: 0.11.6
@@ -42,7 +42,7 @@ jobs:
         git commit -m 'Bump version to ${{ inputs.version }}'
         git push origin 'release/v${{ inputs.version }}'
     - name: Create Pull Request
-      uses: actions/github-script@v6
+      uses: actions/github-script@v9
       id: create-pull-request
       with:
         script: |
@@ -57,7 +57,7 @@ jobs:
           return response.data.number;
     - name: Comment on the Pull Request about Failure
       if: steps.set-version.outcome == 'failure'
-      uses: actions/github-script@v6
+      uses: actions/github-script@v9
       with:
         script: |
           github.rest.issues.createComment({
diff --git a/.github/workflows/rust-publish-dry-run-v2.yml b/.github/workflows/rust-publish-dry-run-v2.yml
index c27eb5d..eab411b 100644
--- a/.github/workflows/rust-publish-dry-run-v2.yml
+++ b/.github/workflows/rust-publish-dry-run-v2.yml
@@ -43,7 +43,7 @@ jobs:
     steps:
     - uses: stellar/actions/disk-cleanup@main
 
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v7
 
     - uses: stellar/actions/rust-cache@main
 
@@ -66,12 +66,12 @@ jobs:
         brew update && brew install make
         echo "$(brew --prefix)/opt/make/libexec/gnubin/" >> "$GITHUB_PATH"
 
-    - uses: stellar/binaries@v36
+    - uses: stellar/binaries@v85
       with:
         name: cargo-hack
         version: 0.6.35
 
-    - uses: stellar/binaries@v26
+    - uses: stellar/binaries@v85
       with:
         name: cargo-workspaces
         version: 0.3.4
@@ -95,7 +95,7 @@ jobs:
     # If a list of crates weren't provided, prepare a list by asking
     # cargo-workspaces for the order it would publish the crates in.
     - name: Prepare List of Crates Ordered by Publish-Order
-      uses: actions/github-script@v7
+      uses: actions/github-script@v9
       id: crates
       with:
         script: |
diff --git a/.github/workflows/rust-publish.yml b/.github/workflows/rust-publish.yml
index 4d1d6b9..3fc88eb 100644
--- a/.github/workflows/rust-publish.yml
+++ b/.github/workflows/rust-publish.yml
@@ -20,10 +20,10 @@ jobs:
     - name: Install additional dependencies (Linux)
       if: inputs.additional-deb-packages != ''
       run: sudo apt-get update && sudo apt-get -y install ${{ inputs.additional-deb-packages }}
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v7
     - uses: stellar/actions/rust-cache@main
     - run: rustup update
-    - uses: stellar/binaries@v21
+    - uses: stellar/binaries@v85
       with:
         name: cargo-workspaces
         version: 0.2.35
diff --git a/.github/workflows/rust-set-rust-version.yml b/.github/workflows/rust-set-rust-version.yml
index 142d4e8..b8fa4aa 100644
--- a/.github/workflows/rust-set-rust-version.yml
+++ b/.github/workflows/rust-set-rust-version.yml
@@ -7,10 +7,10 @@ jobs:
   set-rust-version:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v7
     - uses: stellar/actions/rust-cache@main
     - run: rustup update
-    - uses: stellar/binaries@v21
+    - uses: stellar/binaries@v85
       with:
         name: cargo-set-rust-version
         version: 0.5.0
@@ -42,7 +42,7 @@ jobs:
     # If the diff step indicates an update is required, open a PR.
     - if: steps.diff.outputs.update == 'true'
       name: Create Pull Request
-      uses: actions/github-script@v6
+      uses: actions/github-script@v9
       with:
         script: |
           await github.rest.pulls.create({
diff --git a/.github/workflows/socket-scan.yml b/.github/workflows/socket-scan.yml
index 3ff0e35..79f2286 100644
--- a/.github/workflows/socket-scan.yml
+++ b/.github/workflows/socket-scan.yml
@@ -43,8 +43,8 @@ jobs:
   socket-scan:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: "24"
       - name: Enable Corepack (yarn/pnpm per repo packageManager)
diff --git a/.github/workflows/test-readme.yml b/.github/workflows/test-readme.yml
index d788319..03648a3 100644
--- a/.github/workflows/test-readme.yml
+++ b/.github/workflows/test-readme.yml
@@ -18,7 +18,7 @@ jobs:
   readme:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v7
 
     # Check if every action (directory) is mentioned in the readme.
     - run: |