diff --git a/.github/workflows/canary-v0.yml b/.github/workflows/canary-v0.yml
index 842f3ae45..7336bb429 100644
--- a/.github/workflows/canary-v0.yml
+++ b/.github/workflows/canary-v0.yml
@@ -26,7 +26,7 @@ jobs:
     outputs:
       version: ${{ steps.resolve.outputs.version }}
     steps:
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: "20"
       - name: Resolve latest published v0 release
diff --git a/.github/workflows/canary.yml b/.github/workflows/canary.yml
index 372ffc8d4..16910d23d 100644
--- a/.github/workflows/canary.yml
+++ b/.github/workflows/canary.yml
@@ -20,7 +20,7 @@ jobs:
       ref: ${{ steps.resolve.outputs.ref }}
       version: ${{ steps.resolve.outputs.version }}
     steps:
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: "24"
       - name: Resolve latest stable release commit
diff --git a/.github/workflows/e2e-test.yml b/.github/workflows/e2e-test.yml
index acfff7908..bd7028e69 100644
--- a/.github/workflows/e2e-test.yml
+++ b/.github/workflows/e2e-test.yml
@@ -106,10 +106,10 @@ jobs:
           ref: ${{ inputs.ref || github.sha }}
           persist-credentials: false
       - uses: oven-sh/setup-bun@v2
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: "24"
-      - uses: astral-sh/setup-uv@v6
+      - uses: astral-sh/setup-uv@v7
         with:
           # Keep template installs on the newest Python supported by AgentCore CodeZip.
           python-version: "3.14"
diff --git a/.github/workflows/release-main-and-preview.yml b/.github/workflows/release-main-and-preview.yml
index 0472fdfbf..2d8a10166 100644
--- a/.github/workflows/release-main-and-preview.yml
+++ b/.github/workflows/release-main-and-preview.yml
@@ -70,7 +70,7 @@ jobs:
           fetch-tags: true
           persist-credentials: false
       - uses: oven-sh/setup-bun@v2
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: 20.x
           registry-url: https://registry.npmjs.org
diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
index 9f47ca9bd..0722b7f84 100644
--- a/.github/workflows/verify.yml
+++ b/.github/workflows/verify.yml
@@ -71,7 +71,7 @@ jobs:
       - name: Upload to CodeCov
         # only upload on linux to avoid duplicates.
         if: always() && runner.os == 'Linux'
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v7
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           fail_ci_if_error: false