diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 553a2e95..ee93ddf7 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -103,7 +103,7 @@ jobs:
           git diff --exit-code
       - name: Upload Test Logs
         if: ${{ failure() }}
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: test-logs-${{ env.SUFFIX }}
           retention-days: 7
@@ -111,7 +111,7 @@ jobs:
             test-suite.log
             tests/*.log
       - name: Upload artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: jq-${{ env.SUFFIX }}
           path: jq-${{ env.SUFFIX }}
@@ -168,7 +168,7 @@ jobs:
           git diff --exit-code
       - name: Upload Test Logs
         if: ${{ failure() }}
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: test-logs-${{ env.SUFFIX }}
           retention-days: 7
@@ -176,7 +176,7 @@ jobs:
             test-suite.log
             tests/*.log
       - name: Upload artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: jq-${{ env.SUFFIX }}
           path: jq-${{ env.SUFFIX }}
@@ -247,7 +247,7 @@ jobs:
           git diff --exit-code
       - name: Upload Test Logs
         if: ${{ failure() }}
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: test-logs-${{ env.SUFFIX }}
           retention-days: 7
@@ -255,7 +255,7 @@ jobs:
             test-suite.log
             tests/*.log
       - name: Upload artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: jq-${{ env.SUFFIX }}
           path: jq-${{ env.SUFFIX }}.exe
@@ -283,7 +283,7 @@ jobs:
           make dist dist-zip
           git diff --exit-code
       - name: Upload artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: jq-dist
           if-no-files-found: error
@@ -304,7 +304,7 @@ jobs:
       - name: Clone repository
         uses: actions/checkout@v6
       - name: Download executables
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           pattern: jq-linux-*
           merge-multiple: true
@@ -360,7 +360,7 @@ jobs:
           labels: ${{ steps.metadata.outputs.labels }}
       - name: Generate signed attestations
         if: startsWith(github.ref, 'refs/tags/jq-')
-        uses: actions/attest-build-provenance@v3
+        uses: actions/attest@v4
         with:
           subject-name: ghcr.io/${{ github.repository }}
           subject-digest: ${{ steps.build-push.outputs.digest }}
@@ -380,7 +380,7 @@ jobs:
       - name: Clone repository
         uses: actions/checkout@v6
       - name: Download artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           pattern: jq-*
           merge-multiple: true
@@ -396,7 +396,7 @@ jobs:
           gh release create "$TAG_NAME" --draft --title "jq ${TAG_NAME#jq-}" --generate-notes
           gh release upload "$TAG_NAME" --clobber jq-* sha256sum.txt
       - name: Generate signed attestations
-        uses: actions/attest-build-provenance@v3
+        uses: actions/attest@v4
         with:
           subject-path: jq-*
       - name: Import GPG key
diff --git a/.github/workflows/decnum.yml b/.github/workflows/decnum.yml
index aed67436..81c7d91e 100644
--- a/.github/workflows/decnum.yml
+++ b/.github/workflows/decnum.yml
@@ -33,7 +33,7 @@ jobs:
           git diff --exit-code
       - name: Upload Test Logs
         if: ${{ failure() }}
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: test-logs-decnum-disabled
           retention-days: 7
diff --git a/.github/workflows/oniguruma.yml b/.github/workflows/oniguruma.yml
index 6fbe6d05..ea36ddf2 100644
--- a/.github/workflows/oniguruma.yml
+++ b/.github/workflows/oniguruma.yml
@@ -33,7 +33,7 @@ jobs:
           git diff --exit-code
       - name: Upload Test Logs
         if: ${{ failure() }}
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: test-logs-oniguruma-installed
           retention-days: 7
@@ -66,7 +66,7 @@ jobs:
           git diff --exit-code
       - name: Upload Test Logs
         if: ${{ failure() }}
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: test-logs-oniguruma-disabled
           retention-days: 7
diff --git a/.github/workflows/scanbuild.yml b/.github/workflows/scanbuild.yml
index 5baef076..21800a15 100644
--- a/.github/workflows/scanbuild.yml
+++ b/.github/workflows/scanbuild.yml
@@ -39,7 +39,7 @@ jobs:
         run: |
           cat test-suite.log tests/*.log
       - name: Upload Logs
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: Scan-Build Reports
           path: /tmp/scan-build*
diff --git a/.github/workflows/valgrind.yml b/.github/workflows/valgrind.yml
index 333e307e..c698a8e5 100644
--- a/.github/workflows/valgrind.yml
+++ b/.github/workflows/valgrind.yml
@@ -32,7 +32,7 @@ jobs:
           git diff --exit-code
       - name: Upload Test Logs
         if: ${{ failure() }}
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: test-logs-valgrind-linux
           retention-days: 7