diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 7fa87fc..c1cceff 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -1,4 +1,4 @@
-name: Build
+name: Build
 
 on:
   workflow_dispatch:
@@ -24,7 +24,7 @@ jobs:
 
     steps:
     - name: Checkout code
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: 0  # needed for nbgv
 
@@ -70,7 +70,7 @@ jobs:
           **/TestResults/**/*.trx
 
     - name: Upload Coverage to Codecov
-      uses: codecov/codecov-action@v5
+      uses: codecov/codecov-action@v7
       if: always()
       with:
         # MTP writes coverage relative to each test project; search recursively
@@ -87,7 +87,7 @@ jobs:
       run: dotnet pack Trellis.Microservices.slnx --no-build --verbosity normal -c Release -o artifacts/
 
     - name: Upload artifacts
-      uses: actions/upload-artifact@v6
+      uses: actions/upload-artifact@v7
       if: ${{ success() && !github.base_ref }}
       with:
         name: artifact
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 9050200..500ba38 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -1,4 +1,4 @@
-name: "CodeQL"
+name: "CodeQL"
 
 on:
   workflow_dispatch:
@@ -32,7 +32,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: 0  # needed for nbgv
 
diff --git a/.github/workflows/publish-alpha.yml b/.github/workflows/publish-alpha.yml
index aa3d896..cc57c9e 100644
--- a/.github/workflows/publish-alpha.yml
+++ b/.github/workflows/publish-alpha.yml
@@ -1,4 +1,4 @@
-name: Publish Trellis.Microservices Alpha
+name: Publish Trellis.Microservices Alpha
 
 # Publishes alpha NuGet packages to GitHub Packages on manual dispatch.
 # For stable nuget.org releases, use the publish.yml workflow instead.
@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0  # needed for nbgv
 
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index ae2d8c7..2267b62 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -1,4 +1,4 @@
-name: Publish NuGet Package
+name: Publish NuGet Package
 
 # Publishes stable NuGet packages to nuget.org on manual dispatch with an
 # explicit dry-run option. Requires the NUGET_API_KEY repository secret.
@@ -22,7 +22,7 @@ jobs:
 
     steps:
     - name: Checkout code
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: 0  # needed for nbgv
 
@@ -106,7 +106,7 @@ jobs:
         ls -lh nupkgs/*.nupkg
 
     - name: Upload SBOMs
-      uses: actions/upload-artifact@v6
+      uses: actions/upload-artifact@v7
       with:
         name: sbom-spdx
         path: sbom/_manifest/**