diff --git a/.github/workflows/agent-image-smoke.yml b/.github/workflows/agent-image-smoke.yml
index ca244ca3..382aa013 100644
--- a/.github/workflows/agent-image-smoke.yml
+++ b/.github/workflows/agent-image-smoke.yml
@@ -129,7 +129,7 @@ jobs:
           done
 
       - name: Set up Node (for the panel screenshot step below)
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: '22'
 
@@ -176,7 +176,7 @@ jobs:
           } | tee -a /tmp/smoke-report.md
 
       - name: Upload panel screenshot artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ux-qa-panel-screenshot
           path: /tmp/pw-artifacts/ux-qa-panel-login.png
@@ -188,7 +188,7 @@ jobs:
         # an `if:` that doesn't call a status function is otherwise
         # implicitly ANDed with success(), silently swallowing the report.
         if: always() && github.event_name == 'pull_request'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const fs = require('fs');
diff --git a/.github/workflows/panel-ci.yml b/.github/workflows/panel-ci.yml
index d5f2255a..ee154e02 100644
--- a/.github/workflows/panel-ci.yml
+++ b/.github/workflows/panel-ci.yml
@@ -58,7 +58,7 @@ jobs:
           fetch-tags: true
 
       - name: Set up Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           # pnpm 11 (pinned in panel/package.json via packageManager) requires
           # Node >=22.13; Node 20 makes `pnpm install` fail the engines check.