diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index f7ba132..b37374c 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -11,11 +11,11 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: pnpm/action-setup@v4
+      - uses: actions/checkout@v7
+      - uses: pnpm/action-setup@v6
         with:
           version: 9
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v6
         with:
           node-version: 22.13
           cache: "pnpm"
diff --git a/.github/workflows/playground-comment.yml b/.github/workflows/playground-comment.yml
index 1db0ba4..c1cecea 100644
--- a/.github/workflows/playground-comment.yml
+++ b/.github/workflows/playground-comment.yml
@@ -21,7 +21,7 @@ jobs:
     # Skip bot-authored PRs (e.g. dependabot) — the playground note isn't useful there.
     if: ${{ github.event.pull_request.user.type != 'Bot' }}
     steps:
-      - uses: actions/github-script@v7
+      - uses: actions/github-script@v9
         with:
           script: |
             const pr = context.issue.number;
diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml
index b47dd6a..20d447c 100644
--- a/.github/workflows/preview.yml
+++ b/.github/workflows/preview.yml
@@ -22,11 +22,11 @@ jobs:
   preview:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
+      - uses: actions/checkout@v7
+      - uses: pnpm/action-setup@v6
         with:
           version: 9
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version: 22.13
           cache: pnpm