diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3dee5be..6f8e95c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -21,10 +21,10 @@ jobs:
     runs-on: ubuntu-24.04
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0   # need history to diff against the base ref
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: '3.12'
       - run: pip install pre-commit
@@ -74,13 +74,13 @@ jobs:
       CC: ${{ matrix.compiler.cc }}
       CXX: ${{ matrix.compiler.cxx }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Install toolchain (OpenMP + MPI + Catch2)
         run: |
           sudo apt-get update
           sudo apt-get install -y cmake ninja-build libomp-dev \
             openmpi-bin libopenmpi-dev catch2 ccache
-      - uses: actions/cache@v4
+      - uses: actions/cache@v5
         with:
           path: ~/.cache/ccache
           key: ccache-${{ matrix.compiler.cxx }}-${{ matrix.build_type }}-${{ github.sha }}
@@ -101,7 +101,7 @@ jobs:
         run: ctest --test-dir build --output-on-failure
       - name: Upload ctest log on failure
         if: failure()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ctest-${{ matrix.compiler.cxx }}-${{ matrix.build_type }}
           path: build/Testing/Temporary/LastTest.log
@@ -115,9 +115,9 @@ jobs:
     runs-on: ubuntu-24.04
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Install CUDA toolkit
-        uses: Jimver/cuda-toolkit@v0.2.19
+        uses: Jimver/cuda-toolkit@v0.2.35
         with:
           cuda: '12.5.0'
           method: network
@@ -140,7 +140,7 @@ jobs:
     timeout-minutes: 30
     continue-on-error: true
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Build + run CUDA tests and balance benchmark
         run: |
           make -C cuda ARCH=sm_86
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 9ed5407..999db45 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -24,7 +24,7 @@ jobs:
       security-events: write   # upload results to the Security tab
       contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Install build deps
         run: |
@@ -32,7 +32,7 @@ jobs:
           sudo apt-get install -y cmake ninja-build g++ libopenmpi-dev openmpi-bin libomp-dev
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: c-cpp
           queries: security-and-quality
@@ -45,6 +45,6 @@ jobs:
           cmake --build build -j
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4
         with:
           category: "/language:c-cpp"
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2770c34..f802761 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-24.04
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Install toolchain
         run: |
           sudo apt-get update
@@ -43,7 +43,7 @@ jobs:
       contents: write          # create the GitHub Release
       packages: write          # push the image to GHCR (if built)
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Check for Apptainer definition
         id: defcheck
         run: |
@@ -56,7 +56,7 @@ jobs:
         if: steps.defcheck.outputs.have_def == 'true'
         run: apptainer build "amr-cpu_${GITHUB_SHA::8}.sif" container/amr-cpu.def
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           generate_release_notes: true
           files: |