diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index a9aa42ea22..c2a0dcb26d 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -36,15 +36,15 @@ jobs:
     runs-on: ubuntu-22.04
     if: github.event_name == 'push' || contains(github.event.pull_request.labels.*.name, 'build-wheel')
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           # prefer head commit over merge commit in case of PRs
           ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || '' }}
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         name: Set up Python 🐍
         with:
           python-version: ${{ env.PYTHON_VERSION }}
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         name: Setup Node
         with:
           node-version: ${{ env.NODE_VERSION }}
@@ -54,7 +54,7 @@ jobs:
         id: uv-cache
         run: echo "dir=$(uv cache dir)" >> $GITHUB_OUTPUT
       - name: Cache uv
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ${{ steps.uv-cache.outputs.dir }}
           key: uv|${{ runner.os }}|3.12|${{ hashFiles('requirements*.txt') }}
@@ -67,7 +67,7 @@ jobs:
         run: npm ci
       - name: Build wheel 🏗
         run: ./bin/maintenance/build-wheel.py indico --add-version-suffix
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v6
         name: Upload build artifacts 📦
         with:
           name: indico-wheel
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 35e9ac2af6..56124addb5 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -29,21 +29,21 @@ jobs:
           - { name: '3.12', python: '3.12', python_version_var: 'PYTHON_VERSION_312' }
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/cache@v4
+      - uses: actions/cache@v5
         id: cache-npm
         with:
           path: node_modules
           key: ${{ runner.os }}-npm-${{ hashFiles('package*.json') }}
 
       - name: Setup Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ env[matrix.python_version_var] }}
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         if: steps.cache-npm.outputs.cache-hit != 'true'
         with:
           node-version: ${{ env.NODE_VERSION }}
@@ -69,7 +69,7 @@ jobs:
         run: echo "dir=$(uv cache dir)" >> $GITHUB_OUTPUT
 
       - name: Cache uv
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ${{ steps.uv-cache.outputs.dir }}
           key: uv|${{ runner.os }}|${{ matrix.python }}|${{ hashFiles('requirements*.txt') }}
@@ -87,7 +87,7 @@ jobs:
         run: tar cf /tmp/env.tar .venv node_modules
 
       - name: Upload environment
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: environment-${{ matrix.name }}
           retention-days: 1
@@ -99,15 +99,15 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       # BEGIN common steps - edit all occurrences if needed!
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Setup Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ env.PYTHON_VERSION_312 }}
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ env.NODE_VERSION }}
 
@@ -115,7 +115,7 @@ jobs:
         run: curl -LsSf https://astral.sh/uv/install.sh | sh
 
       - name: Download environment
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
         with:
           name: environment-3.12
           path: /tmp
@@ -241,15 +241,15 @@ jobs:
 
     steps:
       # BEGIN common steps - edit all occurrences if needed!
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Setup Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ env[matrix.python_version_var] }}
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ env.NODE_VERSION }}
 
@@ -257,7 +257,7 @@ jobs:
         run: curl -LsSf https://astral.sh/uv/install.sh | sh
 
       - name: Download environment
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
         with:
           name: environment-${{ matrix.name }}
           path: /tmp
@@ -300,15 +300,15 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       # BEGIN common steps - edit all occurrences if needed!
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Setup Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ env.PYTHON_VERSION_312 }}
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ env.NODE_VERSION }}
 
@@ -316,7 +316,7 @@ jobs:
         run: curl -LsSf https://astral.sh/uv/install.sh | sh
 
       - name: Download environment
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
         with:
           name: environment-3.12
           path: /tmp
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 589901d59b..79790f2b5d 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -30,11 +30,11 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Setup Python
         if: matrix.language == 'python'
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.12'
 
@@ -48,7 +48,7 @@ jobs:
           echo "CODEQL_PYTHON=$(which python)" >> $GITHUB_ENV
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: ${{ matrix.language }}
           setup-python-dependencies: false
@@ -58,7 +58,7 @@ jobs:
           # queries: ./path/to/local/query, your-org/your-repo/queries@main
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v3
+        uses: github/codeql-action/autobuild@v4
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index 9a1f78503b..9fdaddbcc0 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -10,6 +10,6 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/labeler@v5
+      - uses: actions/labeler@v6
         with:
           sync-labels: true
diff --git a/.github/workflows/pypi.yml b/.github/workflows/pypi.yml
index 9a01f43ba4..7a81e7e3a1 100644
--- a/.github/workflows/pypi.yml
+++ b/.github/workflows/pypi.yml
@@ -20,8 +20,8 @@ jobs:
     name: Build package 📦
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
         name: Set up Python 🐍
         with:
           python-version: ${{ env.PYTHON_VERSION }}
@@ -37,7 +37,7 @@ jobs:
         run: python .github/utils/check_version.py "${GITHUB_REF#refs/tags/v}"
       - name: Extract changelog 📜
         run: python .github/utils/extract_changelog.py "${GITHUB_REF#refs/tags/v}" /tmp/changelog.md
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         name: Setup Node
         with:
           node-version: ${{ env.NODE_VERSION }}
@@ -47,13 +47,13 @@ jobs:
         run: npm ci
       - name: Build wheel 🏗
         run: ./bin/maintenance/build-wheel.py indico
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v6
         name: Upload build artifacts 📦
         with:
           name: indico-wheel
           retention-days: 7
           path: ./dist
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v6
         name: Store Markdown changelog 📜
         with:
           name: changelog
@@ -67,7 +67,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v7
         name: Download build artifacts 📦
       - name: Create draft release 🐙
         run: >-
@@ -91,16 +91,16 @@ jobs:
       contents: write
       id-token: write
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v7
       # Try uploading to Test PyPI first, in case something fails.
       - name: Publish to Test PyPI 🧪
-        uses: pypa/gh-action-pypi-publish@v1.12.2
+        uses: pypa/gh-action-pypi-publish@v1.13.0
         with:
           repository-url: https://test.pypi.org/legacy/
           packages-dir: indico-wheel/
           attestations: false
       - name: Publish to PyPI 🚀
-        uses: pypa/gh-action-pypi-publish@v1.12.2
+        uses: pypa/gh-action-pypi-publish@v1.13.0
         with:
           packages-dir: indico-wheel/
       - name: Publish GitHub release 🐙
diff --git a/.github/workflows/translations.yml b/.github/workflows/translations.yml
index f29610a89b..fa55ff7c26 100644
--- a/.github/workflows/translations.yml
+++ b/.github/workflows/translations.yml
@@ -17,8 +17,8 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
         name: Set up Python 🐍
         with:
           python-version: ${{ env.PYTHON_VERSION }}
@@ -26,7 +26,7 @@ jobs:
           cache-dependency-path: |
             requirements.txt
             requirements.dev.txt
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         name: Setup Node
         with:
           node-version: ${{ env.NODE_VERSION }}
@@ -50,7 +50,7 @@ jobs:
         run: ./bin/maintenance/update_moment_locales.py
       - name: Build wheel 🏗
         run: ./bin/maintenance/build-wheel.py indico --add-version-suffix --ignore-unclean
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v6
         name: Upload build artifacts 📦
         with:
           name: indico-translation-wheel