diff --git a/.github/workflows/engine.yml b/.github/workflows/engine.yml
index afb514c4..c4bad0e4 100644
--- a/.github/workflows/engine.yml
+++ b/.github/workflows/engine.yml
@@ -23,7 +23,7 @@ jobs:
       - uses: actions/checkout@v7.0.1
 
       - name: Setup Node.js
-        uses: actions/setup-node@v7.0.0
+        uses: actions/setup-node@v7.1.0
         with:
           node-version: 24
 
diff --git a/.github/workflows/native-build.yml b/.github/workflows/native-build.yml
index 61d22efd..c74408d3 100644
--- a/.github/workflows/native-build.yml
+++ b/.github/workflows/native-build.yml
@@ -24,7 +24,7 @@ jobs:
       - uses: actions/checkout@v7.0.1
 
       - name: Setup Node.js
-        uses: actions/setup-node@v7.0.0
+        uses: actions/setup-node@v7.1.0
         with:
           node-version: 24
 
@@ -78,7 +78,7 @@ jobs:
       # job restores them in one step and the layout it gets is the layout
       # `.vscodeignore` whitelists and the loader reads.
       - name: Upload engine binaries
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: native-all
           path: engine/native/*/git-graph.node
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index b89e4e53..486de046 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -22,7 +22,7 @@ jobs:
       - uses: actions/checkout@v7.0.1
 
       - name: Setup Node.js
-        uses: actions/setup-node@v7.0.0
+        uses: actions/setup-node@v7.1.0
         with:
           node-version: 24
 
@@ -38,7 +38,7 @@ jobs:
       # cost is deliberate — every install carries seven binaries it cannot
       # load — and buys one file to download instead of nine.
       - name: Download engine binaries
-        uses: actions/download-artifact@v8.0.1
+        uses: actions/download-artifact@v8.0.2
         with:
           name: native-all
           path: engine/native/
@@ -71,7 +71,7 @@ jobs:
           echo "Packaged $vsix ($(du -h "$vsix" | cut -f1))"
 
       - name: Upload VSIX
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: vsix
           path: ${{ steps.package.outputs.vsix }}
@@ -85,14 +85,14 @@ jobs:
       - uses: actions/checkout@v7.0.1
 
       - name: Setup Node.js
-        uses: actions/setup-node@v7.0.0
+        uses: actions/setup-node@v7.1.0
         with:
           node-version: 24
 
       - run: corepack enable && pnpm install --frozen-lockfile
 
       - name: Download VSIX
-        uses: actions/download-artifact@v8.0.1
+        uses: actions/download-artifact@v8.0.2
         with:
           name: vsix
           path: dist/