diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index a9aa42ea22..a7f9d07edd 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-22.04
     if: github.event_name == 'push' || contains(github.event.pull_request.labels.*.name, 'build-wheel')
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           # prefer head commit over merge commit in case of PRs
           ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || '' }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 35e9ac2af6..72ee8c2457 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -29,7 +29,7 @@ jobs:
           - { name: '3.12', python: '3.12', python_version_var: 'PYTHON_VERSION_312' }
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - uses: actions/cache@v4
         id: cache-npm
@@ -99,7 +99,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       # BEGIN common steps - edit all occurrences if needed!
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Setup Python
         uses: actions/setup-python@v5
@@ -115,7 +115,7 @@ jobs:
         run: curl -LsSf https://astral.sh/uv/install.sh | sh
 
       - name: Download environment
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           name: environment-3.12
           path: /tmp
@@ -241,7 +241,7 @@ jobs:
 
     steps:
       # BEGIN common steps - edit all occurrences if needed!
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Setup Python
         uses: actions/setup-python@v5
@@ -257,7 +257,7 @@ jobs:
         run: curl -LsSf https://astral.sh/uv/install.sh | sh
 
       - name: Download environment
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           name: environment-${{ matrix.name }}
           path: /tmp
@@ -300,7 +300,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       # BEGIN common steps - edit all occurrences if needed!
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Setup Python
         uses: actions/setup-python@v5
@@ -316,7 +316,7 @@ jobs:
         run: curl -LsSf https://astral.sh/uv/install.sh | sh
 
       - name: Download environment
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           name: environment-3.12
           path: /tmp
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 589901d59b..816c84552d 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -30,7 +30,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Setup Python
         if: matrix.language == 'python'
diff --git a/.github/workflows/pypi.yml b/.github/workflows/pypi.yml
index 9a01f43ba4..2c58dcb40f 100644
--- a/.github/workflows/pypi.yml
+++ b/.github/workflows/pypi.yml
@@ -20,7 +20,7 @@ jobs:
     name: Build package 📦
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-python@v5
         name: Set up Python 🐍
         with:
@@ -67,7 +67,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v5
         name: Download build artifacts 📦
       - name: Create draft release 🐙
         run: >-
@@ -91,16 +91,16 @@ jobs:
       contents: write
       id-token: write
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v5
       # Try uploading to Test PyPI first, in case something fails.
       - name: Publish to Test PyPI 🧪
-        uses: pypa/gh-action-pypi-publish@v1.12.2
+        uses: pypa/gh-action-pypi-publish@v1.12.4
         with:
           repository-url: https://test.pypi.org/legacy/
           packages-dir: indico-wheel/
           attestations: false
       - name: Publish to PyPI 🚀
-        uses: pypa/gh-action-pypi-publish@v1.12.2
+        uses: pypa/gh-action-pypi-publish@v1.12.4
         with:
           packages-dir: indico-wheel/
       - name: Publish GitHub release 🐙
diff --git a/.github/workflows/translations.yml b/.github/workflows/translations.yml
index f29610a89b..70440c08d7 100644
--- a/.github/workflows/translations.yml
+++ b/.github/workflows/translations.yml
@@ -17,7 +17,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-python@v5
         name: Set up Python 🐍
         with: