diff --git a/.github/workflows/android-ui.yml b/.github/workflows/android-ui.yml
index bb9557a..aba6c9d 100644
--- a/.github/workflows/android-ui.yml
+++ b/.github/workflows/android-ui.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.event.workflow_run.head_sha }}
           fetch-depth: 0  # Full git history for version calculation
@@ -40,7 +40,7 @@ jobs:
           java-version: "21"
 
       - name: Set up Android SDK
-        uses: android-actions/setup-android@v3
+        uses: android-actions/setup-android@v4
 
       - name: Install Android components
         run: |
@@ -75,7 +75,7 @@ jobs:
           find ${{ github.workspace }}/app/src/main/jniLibs -path "*x86_64*letterbox_proxy*.so" | head -1 || (echo "ERROR: x86_64 letterbox_proxy not found!" && exit 1)
 
       - name: Set up Gradle
-        uses: gradle/actions/setup-gradle@v5.0.2
+        uses: gradle/actions/setup-gradle@v6.2.0
 
       - name: Gradle permissions
         run: chmod +x gradlew
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 4b9c715..71d20b0 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -39,7 +39,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0  # Full git history for version calculation
           fetch-tags: true
@@ -72,7 +72,7 @@ jobs:
           java-version: "21"
 
       - name: Set up Android SDK
-        uses: android-actions/setup-android@v3
+        uses: android-actions/setup-android@v4
 
       - name: Install Android components
         run: |
@@ -94,7 +94,7 @@ jobs:
           save-if: ${{ env.RUST_CACHE_SAVE == 'true' }}
 
       - name: Set up Gradle
-        uses: gradle/actions/setup-gradle@v5.0.2
+        uses: gradle/actions/setup-gradle@v6.2.0
 
       - name: Rust format check
         run: |
@@ -135,7 +135,7 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           submodules: recursive
 
@@ -176,7 +176,7 @@ jobs:
       jnilibs-artifact-name: ${{ steps.artifact-names.outputs.jnilibs }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0  # Full git history for version calculation
           fetch-tags: true
@@ -206,7 +206,7 @@ jobs:
           java-version: "21"
 
       - name: Set up Android SDK
-        uses: android-actions/setup-android@v3
+        uses: android-actions/setup-android@v4
 
       - name: Install Android components
         run: |
@@ -242,7 +242,7 @@ jobs:
         run: chmod +x gradlew
 
       - name: Set up Gradle
-        uses: gradle/actions/setup-gradle@v5.0.2
+        uses: gradle/actions/setup-gradle@v6.2.0
 
       # Single workspace invocation builds both letterbox-core and letterbox-proxy
       # for all three ABIs in one pass, reusing the compiled dependency graph
diff --git a/.github/workflows/pre-release.yml b/.github/workflows/pre-release.yml
index 7663037..bc55798 100644
--- a/.github/workflows/pre-release.yml
+++ b/.github/workflows/pre-release.yml
@@ -19,7 +19,7 @@ jobs:
     if: ${{ github.event.workflow_run.conclusion == 'success' && github.event.workflow_run.head_branch == 'main' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.event.workflow_run.head_sha }}
           fetch-depth: 0  # Full git history for version calculation
@@ -27,7 +27,7 @@ jobs:
           submodules: recursive
 
       - name: Set up Android SDK
-        uses: android-actions/setup-android@v3
+        uses: android-actions/setup-android@v4
 
       - name: Install Android build tools
         run: |
@@ -117,7 +117,7 @@ jobs:
           echo "Version: $VERSION_NAME"
 
       - name: Create pre-release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           tag_name: pre-release-${{ steps.version.outputs.short_sha }}
           name: Pre-release ${{ steps.version.outputs.version_name }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7b513d6..f1c8880 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -26,7 +26,7 @@ jobs:
           echo "Release tag '$TAG_NAME' is valid"
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0  # Full git history for version calculation
           fetch-tags: true
@@ -39,7 +39,7 @@ jobs:
           java-version: "21"
 
       - name: Set up Android SDK
-        uses: android-actions/setup-android@v3
+        uses: android-actions/setup-android@v4
 
       - name: Install Android components
         run: |
@@ -76,7 +76,7 @@ jobs:
           echo "ANDROID_NDK_HOME=$ANDROID_SDK_ROOT/ndk/26.1.10909125" >> $GITHUB_ENV
 
       - name: Set up Gradle
-        uses: gradle/actions/setup-gradle@v5.0.2
+        uses: gradle/actions/setup-gradle@v6.2.0
 
       - name: Gradle permissions
         run: chmod +x gradlew
@@ -123,7 +123,7 @@ jobs:
       contents: write  # Required for uploading to release
     steps:
       - name: Set up Android SDK
-        uses: android-actions/setup-android@v3
+        uses: android-actions/setup-android@v4
 
       - name: Install Android build tools
         run: |
@@ -164,7 +164,7 @@ jobs:
           rm -f "$UNSIGNED_APK"
 
       - name: Upload release APK to release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           files: ./artifacts/*.apk
         env:
diff --git a/.github/workflows/sign-test.yml b/.github/workflows/sign-test.yml
index caa1b83..477e9ce 100644
--- a/.github/workflows/sign-test.yml
+++ b/.github/workflows/sign-test.yml
@@ -21,7 +21,7 @@ jobs:
       # This job operates on artifacts only
 
       - name: Set up Android SDK
-        uses: android-actions/setup-android@v3
+        uses: android-actions/setup-android@v4
 
       - name: Install Android build tools
         run: |