diff --git a/.github/workflows/android.yml b/.github/workflows/android.yml
index 41225a76..999d378c 100644
--- a/.github/workflows/android.yml
+++ b/.github/workflows/android.yml
@@ -33,7 +33,7 @@ jobs:
         - {arch: "arm64-v8a"}
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v7
 
     - name: Configure CMake
       run: |
diff --git a/.github/workflows/apple.yml b/.github/workflows/apple.yml
index 496cca52..d09b4d2d 100644
--- a/.github/workflows/apple.yml
+++ b/.github/workflows/apple.yml
@@ -42,7 +42,7 @@ jobs:
         - {name: "iOS Simulator", os: "macOS-latest", platform: "ios-simulator", cmake_extra: "-DCMAKE_TOOLCHAIN_FILE=cmake/ios.toolchain.cmake -DPLATFORM=SIMULATOR64COMBINED -G Xcode" }
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v7
       with:
         # Need full history + tags so the version can be derived from the git tag
         fetch-depth: 0
@@ -115,7 +115,7 @@ jobs:
 
     - name: upload dump
       if: failure()
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: dumps-${{ matrix.config.name }}
         path: dumps
@@ -128,7 +128,7 @@ jobs:
 
     - name: Upload macOS Package and Framework
       if: matrix.config.name == 'macOS-latest'
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: build-macOS-latest
         path: |
@@ -137,14 +137,14 @@ jobs:
 
     - name: Upload iOS Framework
       if: matrix.config.name == 'iOS'
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: build-iOS
         path: install/Frameworks/lsl.framework.zip
 
     - name: Upload iOS Simulator Framework
       if: matrix.config.name == 'iOS Simulator'
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: build-iOS-Simulator
         path: install/Frameworks/lsl.framework.zip
@@ -154,16 +154,16 @@ jobs:
     needs: build
     runs-on: macOS-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/download-artifact@v4
+      - uses: actions/checkout@v7
+      - uses: actions/download-artifact@v8
         with:
           name: build-macOS-latest
           path: build-macOS-latest
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           name: build-iOS
           path: build-iOS
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           name: build-iOS-Simulator
           path: build-iOS-Simulator
@@ -189,7 +189,7 @@ jobs:
             --output .
 
       - name: upload artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: mac-packages
           path: |
@@ -198,7 +198,7 @@ jobs:
 
       - name: Upload to release
         if: github.event_name == 'release'
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           files: |
             lsl.xcframework.*.zip
diff --git a/.github/workflows/cppcmake.yml b/.github/workflows/cppcmake.yml
index ee393b51..d6fa1d01 100644
--- a/.github/workflows/cppcmake.yml
+++ b/.github/workflows/cppcmake.yml
@@ -62,7 +62,7 @@ jobs:
         - {name: "macos-dylib-arm64", os: "macos-latest", arch: "arm64", cmake_extra: "-DLSL_FRAMEWORK=OFF", build_only: true}
 
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         # Need full history + tags so the version can be derived from the git tag
         fetch-depth: 0
@@ -87,7 +87,7 @@ jobs:
     # Cache dependencies for Linux
     - name: Cache APT packages
       if: runner.os == 'Linux'
-      uses: actions/cache@v4
+      uses: actions/cache@v6
       with:
         path: /var/cache/apt/archives
         key: ${{ runner.os }}-apt-${{ matrix.config.name }}-${{ hashFiles('.github/workflows/cppcmake.yml') }}
@@ -98,7 +98,7 @@ jobs:
     # Cache build artifacts with ccache
     - name: Cache ccache
       if: runner.os == 'Linux' || runner.os == 'macOS'
-      uses: actions/cache@v4
+      uses: actions/cache@v6
       with:
         path: ~/.ccache
         key: ${{ runner.os }}-ccache-${{ matrix.config.name }}-${{ github.sha }}
@@ -244,6 +244,6 @@ jobs:
 
     - name: Upload to release
       if: github.event_name == 'release' && matrix.config.build_only != true
-      uses: softprops/action-gh-release@v2
+      uses: softprops/action-gh-release@v3
       with:
         files: package/*.*
diff --git a/.github/workflows/mingw_static.yml b/.github/workflows/mingw_static.yml
index fbdc951c..ec09ad8b 100644
--- a/.github/workflows/mingw_static.yml
+++ b/.github/workflows/mingw_static.yml
@@ -32,7 +32,7 @@ jobs:
       run:
         shell: 'msys2 {0}'
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v7
     - uses: msys2/setup-msys2@v2
       with:
         msystem: ${{matrix.sys}}
diff --git a/.github/workflows/raspberry_pi_manual.yml b/.github/workflows/raspberry_pi_manual.yml
index d4d6a9dc..b43d7942 100644
--- a/.github/workflows/raspberry_pi_manual.yml
+++ b/.github/workflows/raspberry_pi_manual.yml
@@ -29,7 +29,7 @@ jobs:
         - {name: "rpi-armv7l", os: "raspios_lite:latest", cpu: "cortex-a7", cpu_info: "cpuinfo/raspberrypi_3b", cmake_extra: "-DLSL_UNITTESTS=ON -DLSL_BENCHMARKS=ON" }
         - {name: "rpi-aarch64", os: "raspios_lite_arm64:latest", cpu: "cortex-a53", cpu_info: "cpuinfo/raspberrypi_4b", cmake_extra: "-DLSL_UNITTESTS=ON -DLSL_BENCHMARKS=ON" }
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - uses: pguyot/arm-runner-action@v2
         with:
           base_image: ${{ matrix.config.os }}
diff --git a/.github/workflows/sanitize.yml b/.github/workflows/sanitize.yml
index a45f7b1c..92919c3c 100644
--- a/.github/workflows/sanitize.yml
+++ b/.github/workflows/sanitize.yml
@@ -28,7 +28,7 @@ jobs:
     runs-on: 'ubuntu-latest'
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Install build toolchain
         run: |
           curl -sSL https://apt.llvm.org/llvm-snapshot.gpg.key | sudo gpg --dearmor --yes -o /etc/apt/trusted.gpg.d/llvm.gpg