diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 96ff070..2d11315 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,9 +4,25 @@ updates:
     directory: /
     schedule: { interval: monthly }
     cooldown: { default-days: 14 }
+    groups:
+      actions: { patterns: ["*"] }
   - package-ecosystem: nuget
     directories: [/CursorFollowWin, /CursorFollowWin/Capture, /CursorFollowWin/Output, /CursorFollowWin/Shared, /CursorFollowWin/tests/CursorFollowWin.Tests]
     schedule: { interval: monthly }
     cooldown: { default-days: 14 }
     groups:
-      nuget: { patterns: ["*"] }
+      # Every project references Microsoft.Extensions.Logging; bumping it in some projects
+      # and not others fails the build with NU1605 (package downgrade).
+      logging:
+        patterns: ["Microsoft.Extensions.*"]
+      nuget:
+        patterns: ["*"]
+        update-types: [minor, patch]
+    ignore:
+      # Windows App SDK 2.x is a deliberate platform move, not a routine bump.
+      - dependency-name: Microsoft.WindowsAppSDK
+        update-types: [version-update:semver-major]
+      # BuildTools tracks the Windows SDK in the TargetFramework (10.0.26100); its "minor" is
+      # the SDK build number, so move it together with the TFM by hand.
+      - dependency-name: Microsoft.Windows.SDK.BuildTools
+        update-types: [version-update:semver-minor]
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4337c59..a165e03 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,7 +16,7 @@ jobs:
   macos:
     runs-on: macos-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Build and unit test
         working-directory: CursorFollowMac
         run: |
@@ -26,8 +26,8 @@ jobs:
   windows:
     runs-on: windows-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-dotnet@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-dotnet@v6
         with:
           dotnet-version: 10.0.x
       - name: Build
@@ -40,7 +40,7 @@ jobs:
   linux:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Install dependencies
         run: |
           sudo apt-get update
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 31647dd..643e078 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -36,7 +36,7 @@ jobs:
   macos:
     runs-on: macos-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           ref: ${{ env.TAG || github.ref }}
 
@@ -65,7 +65,7 @@ jobs:
       - name: Build, sign, package, verify
         run: ./CursorFollowMac/scripts/package.sh
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: macos-dmg
           path: build/CursorFollowMac-*.dmg
@@ -74,16 +74,16 @@ jobs:
   windows:
     runs-on: windows-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           ref: ${{ env.TAG || github.ref }}
-      - uses: actions/setup-dotnet@v4
+      - uses: actions/setup-dotnet@v6
         with:
           dotnet-version: 10.0.x
       - name: Build MSI (unsigned)
         shell: pwsh
         run: ./CursorFollowWin/scripts/package.ps1 -Rid win-x64
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: windows-msi
           path: CursorFollowWin/installer/dist/*.msi
@@ -96,10 +96,10 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           ref: ${{ env.TAG }}
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           path: dist
           merge-multiple: true
diff --git a/CursorFollowWin/Capture/CursorFollowWin.Capture.csproj b/CursorFollowWin/Capture/CursorFollowWin.Capture.csproj
index 0799add..24d530d 100644
--- a/CursorFollowWin/Capture/CursorFollowWin.Capture.csproj
+++ b/CursorFollowWin/Capture/CursorFollowWin.Capture.csproj
@@ -25,7 +25,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Logging" Version="10.0.0" />
+    <PackageReference Include="Microsoft.Extensions.Logging" Version="10.0.12" />
     <PackageReference Include="Microsoft.Graphics.Win2D" Version="1.4.0" />
     <PackageReference Include="Microsoft.Windows.SDK.BuildTools" Version="10.0.26100.7705" />
     <PackageReference Include="Microsoft.WindowsAppSDK" Version="1.8.260317003" />
diff --git a/CursorFollowWin/CursorFollowWin.csproj b/CursorFollowWin/CursorFollowWin.csproj
index a7a4292..41847d3 100644
--- a/CursorFollowWin/CursorFollowWin.csproj
+++ b/CursorFollowWin/CursorFollowWin.csproj
@@ -89,7 +89,7 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Logging" Version="10.0.0" />
+    <PackageReference Include="Microsoft.Extensions.Logging" Version="10.0.12" />
     <PackageReference Include="Microsoft.Graphics.Win2D" Version="1.4.0" />
     <PackageReference Include="Microsoft.Windows.SDK.BuildTools" Version="10.0.26100.7705" />
     <PackageReference Include="Microsoft.WindowsAppSDK" Version="1.8.260317003" />
diff --git a/CursorFollowWin/Output/CursorFollowWin.Output.csproj b/CursorFollowWin/Output/CursorFollowWin.Output.csproj
index 4c684c1..7765fed 100644
--- a/CursorFollowWin/Output/CursorFollowWin.Output.csproj
+++ b/CursorFollowWin/Output/CursorFollowWin.Output.csproj
@@ -25,7 +25,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Logging" Version="10.0.0" />
+    <PackageReference Include="Microsoft.Extensions.Logging" Version="10.0.12" />
     <PackageReference Include="Microsoft.Windows.SDK.BuildTools" Version="10.0.26100.7705" />
     <PackageReference Include="Microsoft.WindowsAppSDK" Version="1.8.260317003" />
   </ItemGroup>
diff --git a/CursorFollowWin/Shared/CursorFollowWin.Shared.csproj b/CursorFollowWin/Shared/CursorFollowWin.Shared.csproj
index 77d001b..7ddb8a6 100644
--- a/CursorFollowWin/Shared/CursorFollowWin.Shared.csproj
+++ b/CursorFollowWin/Shared/CursorFollowWin.Shared.csproj
@@ -7,6 +7,6 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Logging" Version="10.0.0" />
+    <PackageReference Include="Microsoft.Extensions.Logging" Version="10.0.12" />
   </ItemGroup>
 </Project>
diff --git a/CursorFollowWin/tests/CursorFollowWin.Tests/CursorFollowWin.Tests.csproj b/CursorFollowWin/tests/CursorFollowWin.Tests/CursorFollowWin.Tests.csproj
index 2aa2a0e..9bf2bcf 100644
--- a/CursorFollowWin/tests/CursorFollowWin.Tests/CursorFollowWin.Tests.csproj
+++ b/CursorFollowWin/tests/CursorFollowWin.Tests/CursorFollowWin.Tests.csproj
@@ -9,9 +9,9 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.12.0" />
-    <PackageReference Include="xunit" Version="2.9.2" />
-    <PackageReference Include="xunit.runner.visualstudio" Version="2.8.2" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.10.1" />
+    <PackageReference Include="xunit" Version="2.9.3" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="4.0.0" />
   </ItemGroup>
 
   <ItemGroup>