diff --git a/.github/actions/ci-setup/action.yml b/.github/actions/ci-setup/action.yml
index 5ac0769936..902a602895 100644
--- a/.github/actions/ci-setup/action.yml
+++ b/.github/actions/ci-setup/action.yml
@@ -4,11 +4,11 @@ runs:
   using: 'composite'
   steps:
     - name: Setup pnpm
-      uses: pnpm/action-setup@v4
+      uses: pnpm/action-setup@v6
     - name: Setup node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6
       with:
-        node-version: 20.x
+        node-version: 24.x
     - name: Install dependencies
       run: pnpm install
       shell: bash
diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml
index 7c9eafb17b..5c229bbba3 100644
--- a/.github/workflows/codespell.yml
+++ b/.github/workflows/codespell.yml
@@ -18,6 +18,6 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Codespell
         uses: codespell-project/actions-codespell@v2
diff --git a/.github/workflows/dispatchWebsiteUpdate.yaml b/.github/workflows/dispatchWebsiteUpdate.yaml
index b769e571dd..7271302171 100644
--- a/.github/workflows/dispatchWebsiteUpdate.yaml
+++ b/.github/workflows/dispatchWebsiteUpdate.yaml
@@ -21,7 +21,7 @@ jobs:
             echo EOF
           } >> "$GITHUB_ENV"
       - name: Dispatch Website Update
-        uses: peter-evans/repository-dispatch@v3
+        uses: peter-evans/repository-dispatch@v4
         with:
           repository: xyflow/web
           token: ${{ secrets.PAT }}
diff --git a/.github/workflows/playwright.yml b/.github/workflows/playwright.yml
index ac478a2e0f..d1935e8e9e 100644
--- a/.github/workflows/playwright.yml
+++ b/.github/workflows/playwright.yml
@@ -16,7 +16,7 @@ jobs:
       image: mcr.microsoft.com/playwright:v1.51.1-jammy
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - uses: ./.github/actions/ci-setup
       - uses: ./.github/actions/ci-checks
       - name: Run your tests
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index bd16a85490..1eef64c246 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -7,13 +7,16 @@ on:
 
 concurrency: ${{ github.workflow }}-${{ github.ref }}
 
+permissions:
+  id-token: write
+
 jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - uses: ./.github/actions/ci-setup
       - uses: ./.github/actions/ci-checks
 
@@ -27,3 +30,4 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.RELEASE_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true