diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c3f0859..c0a7b70 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -22,11 +22,11 @@ jobs:
         name: Quality
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v4
-            - uses: pnpm/action-setup@v4
+            - uses: actions/checkout@v7
+            - uses: pnpm/action-setup@v6
               with:
                   run_install: false
-            - uses: actions/setup-node@v4
+            - uses: actions/setup-node@v7
               with:
                   node-version: 22.13.0
                   cache: pnpm
@@ -52,11 +52,11 @@ jobs:
             matrix:
                 node: [22.13.0, 24.x]
         steps:
-            - uses: actions/checkout@v4
-            - uses: pnpm/action-setup@v4
+            - uses: actions/checkout@v7
+            - uses: pnpm/action-setup@v6
               with:
                   run_install: false
-            - uses: actions/setup-node@v4
+            - uses: actions/setup-node@v7
               with:
                   node-version: ${{ matrix.node }}
                   cache: pnpm
@@ -64,7 +64,7 @@ jobs:
             - run: pnpm run test:coverage
             - name: Upload coverage
               if: matrix.node == '22.13.0'
-              uses: codecov/codecov-action@v5
+              uses: codecov/codecov-action@v7
               with:
                   files: coverage/lcov.info
                   fail_ci_if_error: true
@@ -74,11 +74,11 @@ jobs:
         name: Package artifact
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v4
-            - uses: pnpm/action-setup@v4
+            - uses: actions/checkout@v7
+            - uses: pnpm/action-setup@v6
               with:
                   run_install: false
-            - uses: actions/setup-node@v4
+            - uses: actions/setup-node@v7
               with:
                   node-version: 22.13.0
                   cache: pnpm
@@ -90,7 +90,7 @@ jobs:
                   mkdir -p artifacts
                   pnpm pack --pack-destination artifacts
                   mv artifacts/*.tgz artifacts/fleetbase-sdk.tgz
-            - uses: actions/upload-artifact@v4
+            - uses: actions/upload-artifact@v7
               with:
                   name: npm-package
                   path: artifacts/*.tgz
@@ -107,12 +107,12 @@ jobs:
                 os: [ubuntu-latest, macos-latest, windows-latest]
                 node: [20.19.4, 22.13.0, 24.x]
         steps:
-            - uses: actions/checkout@v4
-            - uses: actions/download-artifact@v4
+            - uses: actions/checkout@v7
+            - uses: actions/download-artifact@v8
               with:
                   name: npm-package
                   path: artifacts
-            - uses: actions/setup-node@v4
+            - uses: actions/setup-node@v7
               with:
                   node-version: ${{ matrix.node }}
             - name: Install exact candidate
@@ -135,14 +135,14 @@ jobs:
             matrix:
                 manager: [npm, pnpm, yarn, bun]
         steps:
-            - uses: actions/download-artifact@v4
+            - uses: actions/download-artifact@v8
               with:
                   name: npm-package
                   path: artifacts
-            - uses: actions/setup-node@v4
+            - uses: actions/setup-node@v7
               with:
                   node-version: 22.13.0
-            - uses: pnpm/action-setup@v4
+            - uses: pnpm/action-setup@v6
               if: matrix.manager == 'pnpm'
               with:
                   version: 11.24.0
@@ -179,12 +179,12 @@ jobs:
                 resolution: [node16, nodenext, bundler]
                 typescript: [5.0.4, 6.0.2]
         steps:
-            - uses: actions/checkout@v4
-            - uses: actions/download-artifact@v4
+            - uses: actions/checkout@v7
+            - uses: actions/download-artifact@v8
               with:
                   name: npm-package
                   path: artifacts
-            - uses: actions/setup-node@v4
+            - uses: actions/setup-node@v7
               with:
                   node-version: 22.13.0
             - name: Install exact candidate and TypeScript
@@ -203,15 +203,15 @@ jobs:
             matrix:
                 fixture: [vite, webpack, esbuild, react, vue, svelte, angular, ember, next, nuxt, expo, edge]
         steps:
-            - uses: actions/checkout@v4
-            - uses: actions/download-artifact@v4
+            - uses: actions/checkout@v7
+            - uses: actions/download-artifact@v8
               with:
                   name: npm-package
                   path: artifacts
-            - uses: actions/setup-node@v4
+            - uses: actions/setup-node@v7
               with:
                   node-version: 24.15.0
-            - uses: pnpm/action-setup@v4
+            - uses: pnpm/action-setup@v6
               with:
                   version: 11.24.0
             - name: Install pinned fixture dependencies
@@ -229,15 +229,15 @@ jobs:
         needs: package
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v4
-            - uses: actions/download-artifact@v4
+            - uses: actions/checkout@v7
+            - uses: actions/download-artifact@v8
               with:
                   name: npm-package
                   path: artifacts
-            - uses: actions/setup-node@v4
+            - uses: actions/setup-node@v7
               with:
                   node-version: 24.15.0
-            - uses: pnpm/action-setup@v4
+            - uses: pnpm/action-setup@v6
               with:
                   version: 11.24.0
             - name: Install pinned browser dependencies
@@ -258,8 +258,8 @@ jobs:
         if: github.event_name == 'pull_request'
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v4
-            - uses: actions/dependency-review-action@v4
+            - uses: actions/checkout@v7
+            - uses: actions/dependency-review-action@v5
               with:
                   fail-on-severity: high
 
@@ -267,11 +267,11 @@ jobs:
         name: Dependency audit
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v4
-            - uses: pnpm/action-setup@v4
+            - uses: actions/checkout@v7
+            - uses: pnpm/action-setup@v6
               with:
                   run_install: false
-            - uses: actions/setup-node@v4
+            - uses: actions/setup-node@v7
               with:
                   node-version: 22.13.0
                   cache: pnpm
diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
index ffd6877..b8a9888 100644
--- a/.github/workflows/integration.yml
+++ b/.github/workflows/integration.yml
@@ -42,13 +42,13 @@ jobs:
             - name: Record skipped scheduled run
               if: github.event_name == 'schedule' && env.FLEETBASE_PUBLIC_KEY == ''
               run: echo 'Live API smoke skipped because FLEETBASE_PUBLIC_KEY is not configured.' >> "$GITHUB_STEP_SUMMARY"
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@v7
               if: env.FLEETBASE_PUBLIC_KEY != ''
-            - uses: pnpm/action-setup@v4
+            - uses: pnpm/action-setup@v6
               if: env.FLEETBASE_PUBLIC_KEY != ''
               with:
                   run_install: false
-            - uses: actions/setup-node@v4
+            - uses: actions/setup-node@v7
               if: env.FLEETBASE_PUBLIC_KEY != ''
               with:
                   node-version: 22.13.0
diff --git a/.github/workflows/mutation.yml b/.github/workflows/mutation.yml
index 918b3e2..710277b 100644
--- a/.github/workflows/mutation.yml
+++ b/.github/workflows/mutation.yml
@@ -18,11 +18,11 @@ jobs:
         runs-on: ubuntu-latest
         timeout-minutes: 30
         steps:
-            - uses: actions/checkout@v4
-            - uses: pnpm/action-setup@v4
+            - uses: actions/checkout@v7
+            - uses: pnpm/action-setup@v6
               with:
                   run_install: false
-            - uses: actions/setup-node@v4
+            - uses: actions/setup-node@v7
               with:
                   node-version: 24.x
                   cache: pnpm
@@ -30,7 +30,7 @@ jobs:
             - run: pnpm run test:mutation
             - name: Upload mutation report
               if: always()
-              uses: actions/upload-artifact@v4
+              uses: actions/upload-artifact@v7
               with:
                   name: mutation-report-${{ github.sha }}
                   path: reports/mutation
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 28c1f9a..3a569ea 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -49,16 +49,16 @@ jobs:
                       echo "::error::NPM_AUTH_TOKEN must be available to this repository and authorized to publish @fleetbase/sdk."
                       exit 1
                   fi
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@v7
               with:
                   # Never tag whatever main happens to point at when the job starts.
                   ref: ${{ github.event.pull_request.merge_commit_sha || github.sha }}
                   fetch-depth: 0
                   persist-credentials: false
-            - uses: pnpm/action-setup@v4
+            - uses: pnpm/action-setup@v6
               with:
                   run_install: false
-            - uses: actions/setup-node@v4
+            - uses: actions/setup-node@v7
               with:
                   node-version: 24.15.0
                   cache: pnpm
@@ -87,7 +87,7 @@ jobs:
               run: node scripts/verify-published.mjs
             - name: Preserve release evidence
               if: always()
-              uses: actions/upload-artifact@v4
+              uses: actions/upload-artifact@v7
               with:
                   name: npm-release-${{ github.sha }}
                   path: artifacts/
@@ -121,12 +121,12 @@ jobs:
         env:
             RELEASE_TAG: ${{ needs.release.outputs.tag || format('v{0}', inputs.version) }}
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@v7
               with:
                   ref: ${{ github.event.pull_request.merge_commit_sha || github.sha }}
                   fetch-depth: 0
                   persist-credentials: false
-            - uses: actions/setup-node@v4
+            - uses: actions/setup-node@v7
               with:
                   node-version: 24.15.0
                   registry-url: https://npm.pkg.github.com