diff --git a/.github/workflows/build-global-renkulab-images.yml b/.github/workflows/build-global-renkulab-images.yml
index 6701bcc479..8244639b4a 100644
--- a/.github/workflows/build-global-renkulab-images.yml
+++ b/.github/workflows/build-global-renkulab-images.yml
@@ -46,7 +46,7 @@ jobs:
             type=sha,prefix=
             type=raw,value=latest,enable=${{ github.ref == 'refs/heads/master' }}
             type=semver,pattern={{version}},event=tag
-      - uses: buildpacks/github-actions/setup-pack@v5.9.3
+      - uses: buildpacks/github-actions/setup-pack@v5.9.4
       - name: Build image
         run: |
           tags=$(echo "${{ steps.meta.outputs.tags }}" | tr '\n' ',')
diff --git a/.github/workflows/check-acceptance-test-code.yml b/.github/workflows/check-acceptance-test-code.yml
index 12cf1b3338..7471f188f0 100644
--- a/.github/workflows/check-acceptance-test-code.yml
+++ b/.github/workflows/check-acceptance-test-code.yml
@@ -14,7 +14,7 @@ jobs:
     steps:
       - uses: actions/checkout@v5
       - name: Setup JDK
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: 17
diff --git a/.github/workflows/check-acceptance-test-fmt.yml b/.github/workflows/check-acceptance-test-fmt.yml
index 35c2646f90..e91617b71c 100644
--- a/.github/workflows/check-acceptance-test-fmt.yml
+++ b/.github/workflows/check-acceptance-test-fmt.yml
@@ -14,7 +14,7 @@ jobs:
     steps:
       - uses: actions/checkout@v5
       - name: Setup JDK
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: 17
diff --git a/.github/workflows/create-release-branch.yml b/.github/workflows/create-release-branch.yml
index 2fe9c80a5f..bb344277f3 100644
--- a/.github/workflows/create-release-branch.yml
+++ b/.github/workflows/create-release-branch.yml
@@ -34,7 +34,7 @@ jobs:
           git commit -m "chore: create release ${{ github.event.inputs.version }}" --allow-empty
           git push
       - name: Create Pull Request
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           github-token: ${{ secrets.RENKUBOT_GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/cron-jobs.yaml b/.github/workflows/cron-jobs.yaml
index 03889d53e9..908d0dace8 100644
--- a/.github/workflows/cron-jobs.yaml
+++ b/.github/workflows/cron-jobs.yaml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: renku teardown
-        uses: SwissDataScienceCenter/renku-actions/cleanup-renku-ci-deployments@v1.19.0
+        uses: SwissDataScienceCenter/renku-actions/cleanup-renku-ci-deployments@v1.19.1
         env:
           GITLAB_TOKEN: ${{ secrets.DEV_GITLAB_TOKEN }}
           RENKUBOT_KUBECONFIG: ${{ secrets.RENKUBOT_DEV_KUBECONFIG }}
diff --git a/.github/workflows/publish-helm-chart.yml b/.github/workflows/publish-helm-chart.yml
index 5eef8a0a4d..874b0ec7f7 100644
--- a/.github/workflows/publish-helm-chart.yml
+++ b/.github/workflows/publish-helm-chart.yml
@@ -15,7 +15,7 @@ jobs:
       - name: Set version
         id: vars
         run: echo "tag=${GITHUB_REF#refs/*/}" >> $GITHUB_OUTPUT
-      - uses: SwissDataScienceCenter/renku-actions/publish-chart@v1.19.0
+      - uses: SwissDataScienceCenter/renku-actions/publish-chart@v1.19.1
         env:
           CHART_DIR: helm-chart/
           CHART_NAME: renku
diff --git a/.github/workflows/publish-master-merges.yaml b/.github/workflows/publish-master-merges.yaml
index 4c1232ab19..54e0b3552a 100644
--- a/.github/workflows/publish-master-merges.yaml
+++ b/.github/workflows/publish-master-merges.yaml
@@ -35,7 +35,7 @@ jobs:
       - id: set-version
         run: |
           echo "publish_version=${{ steps.bump-semver.outputs.new_version }}.$(echo ${{ github.sha }} | cut -c 1-7)" >> $GITHUB_ENV
-      - uses: SwissDataScienceCenter/renku-actions/publish-chart@v1.19.0
+      - uses: SwissDataScienceCenter/renku-actions/publish-chart@v1.19.1
         env:
           CHART_DIR: helm-chart/
           CHART_TAG: "--tag ${{env.publish_version}}"
diff --git a/.github/workflows/pull-request-test.yml b/.github/workflows/pull-request-test.yml
index 4b80853877..d4bcede5e7 100644
--- a/.github/workflows/pull-request-test.yml
+++ b/.github/workflows/pull-request-test.yml
@@ -43,7 +43,7 @@ jobs:
         working-directory: docs/
     steps:
       - uses: actions/checkout@v5
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v5
         with:
           node-version: "22"
           cache: npm
@@ -73,7 +73,7 @@ jobs:
       extra-values: ${{ steps.deploy-comment.outputs.extra-values }}
     steps:
       - id: deploy-comment
-        uses: SwissDataScienceCenter/renku-actions/check-pr-description@v1.19.0
+        uses: SwissDataScienceCenter/renku-actions/check-pr-description@v1.19.1
         with:
           pr_ref: ${{ github.event.number }}
 
@@ -128,7 +128,7 @@ jobs:
 
       - name: renku build and deploy
         if: needs.check-deploy.outputs.deploy == 'true'
-        uses: SwissDataScienceCenter/renku-actions/deploy-renku@v1.19.0
+        uses: SwissDataScienceCenter/renku-actions/deploy-renku@v1.19.1
         env:
           DOCKER_PASSWORD: ${{ secrets.RENKU_DOCKER_PASSWORD }}
           DOCKER_USERNAME: ${{ secrets.RENKU_DOCKER_USERNAME }}
@@ -179,7 +179,7 @@ jobs:
           az aks get-credentials --resource-group renku-dev --name aks-switzerlandnorth-renku-dev --file "${{ github.workspace }}/renkubot-kube.config"
           chmod 400 "${{ github.workspace }}/renkubot-kube.config"
 
-      - uses: SwissDataScienceCenter/renku-actions/test-renku@v1.19.0
+      - uses: SwissDataScienceCenter/renku-actions/test-renku@v1.19.1
         with:
           kubeconfig: "${{ github.workspace }}/renkubot-kube.config"
           renku-release: ci-renku-${{ github.event.number }}
@@ -206,7 +206,7 @@ jobs:
             rstudioSession,
           ]
     steps:
-      - uses: SwissDataScienceCenter/renku-actions/test-renku-cypress@v1.19.0
+      - uses: SwissDataScienceCenter/renku-actions/test-renku-cypress@v1.19.1
         if: github.event.action != 'closed' && (needs.check-deploy.outputs.switch-deploy == 'true' || needs.check-deploy.outputs.deploy == 'true') && needs.check-deploy.outputs.test-legacy-enabled == 'true'
         with:
           e2e-target: ${{ matrix.tests }}
@@ -233,7 +233,7 @@ jobs:
             sessionBasics,
           ]
     steps:
-      - uses: SwissDataScienceCenter/renku-actions/test-renku-cypress@v1.19.0
+      - uses: SwissDataScienceCenter/renku-actions/test-renku-cypress@v1.19.1
         if: github.event.action != 'closed' && (needs.check-deploy.outputs.switch-deploy == 'true' || needs.check-deploy.outputs.deploy == 'true') && needs.check-deploy.outputs.test-enabled == 'true'
         with:
           e2e-folder: cypress/e2e/v2/
@@ -261,7 +261,7 @@ jobs:
           || needs.check-deploy.outputs.renku-data-services != null
           )
           }}
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: core.setFailed('Cannot merge release PR if it still has custom versions in deploy string.')
 
@@ -313,7 +313,7 @@ jobs:
 
       # Cleanup Azure deployments
       - name: renku teardown
-        uses: SwissDataScienceCenter/renku-actions/cleanup-renku-ci-deployments@v1.19.0
+        uses: SwissDataScienceCenter/renku-actions/cleanup-renku-ci-deployments@v1.19.1
         env:
           HELM_RELEASE_REGEX: "^ci-renku-${{ github.event.number }}$"
           GITLAB_TOKEN: ${{ secrets.DEV_GITLAB_TOKEN }}
diff --git a/.github/workflows/release-test.yml b/.github/workflows/release-test.yml
index 6f069d9bf3..ff7951dbc8 100644
--- a/.github/workflows/release-test.yml
+++ b/.github/workflows/release-test.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Check unmerged PRs
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const prs = await github.rest.pulls.list({