diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3c238687..2fdbacb2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -261,7 +261,7 @@ jobs:
       # normal PR path already covers model negotiation and framing in Rust.
       - name: Cache the source-pinned canonical MCK build
         if: inputs.qualify-mep || github.event_name == 'workflow_dispatch'
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: .dev/mep-tool/
           key: mep-${{ runner.os }}-${{ runner.arch }}-rust-1.98.1-${{ hashFiles('rust/extension.toml', 'scripts/mep_tool.py') }}
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index f0ed89b7..09036bfa 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -23,10 +23,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.15'
-      - uses: astral-sh/setup-uv@v7
+      - uses: astral-sh/setup-uv@v10.3.3
       - name: Reuse the selected native producer
         if: inputs.native-wheel
         uses: actions/download-artifact@v8
@@ -53,13 +53,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.15'
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
-          node-version: '24'
-      - uses: astral-sh/setup-uv@v7
+          node-version: '26'
+      - uses: astral-sh/setup-uv@v10.3.3
       - uses: jdx/mise-action@v5
         with:
           install: false
@@ -86,13 +86,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.15'
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
-          node-version: '24'
-      - uses: astral-sh/setup-uv@v7
+          node-version: '26'
+      - uses: astral-sh/setup-uv@v10.3.3
       - name: Check site tooling and failure behavior
         env:
           MORPHIR_SITE_TEST: '1'
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ff0263d3..ee741913 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -33,7 +33,7 @@ jobs:
       - uses: jdx/mise-action@v5
         with:
           install_args: rust python
-      - uses: actions/cache@v5
+      - uses: actions/cache@v6
         with:
           path: |
             .dev/mep-tool/
@@ -150,12 +150,12 @@ jobs:
           args: --release --locked --out ../../dist/native
 
       - name: Set up Python 3.15
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.15'
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@v10.3.3
 
       - name: Download the pinned published native wheel for a CLI release
         if: startsWith(github.ref, 'refs/tags/python-v')
@@ -198,7 +198,7 @@ jobs:
         if: ${{ !matrix.reuse || startsWith(github.ref, 'refs/tags/python-v') }}
         uses: jdx/mise-action@v5
         with:
-          version: '2026.10.23'
+          version: '2026.10.25'
           install: false
 
       - name: Qualify mise uv and actual pipx installs
@@ -282,7 +282,7 @@ jobs:
           !matrix.reuse &&
           (github.event_name == 'workflow_dispatch' ||
            startsWith(github.ref, 'refs/tags/extension/python/v'))
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: |
             .dev/mep-tool/
@@ -396,7 +396,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Set up Python 3.15
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.15'
 
diff --git a/.github/workflows/site-publish.yml b/.github/workflows/site-publish.yml
index d622b31e..88ebd45f 100644
--- a/.github/workflows/site-publish.yml
+++ b/.github/workflows/site-publish.yml
@@ -66,8 +66,8 @@ jobs:
         env:
           SOURCE_SHA: ${{ steps.producer.outputs.source }}
         run: python3 candidate/scripts/site_release.py verify --site _site --source "$SOURCE_SHA" --deploy
-      - uses: actions/upload-pages-artifact@v4
+      - uses: actions/upload-pages-artifact@v5
         with:
           path: _site
       - id: deploy
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5