diff --git a/.github/workflows/build-images.yml b/.github/workflows/build-images.yml
index 635ee558..6266d83d 100644
--- a/.github/workflows/build-images.yml
+++ b/.github/workflows/build-images.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Login to OCI Registry
         id: login-ocir
         uses: oracle-actions/login-ocir@v1.3.0
@@ -45,7 +45,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Login to OCI Registry
         id: login-ocir
         uses: oracle-actions/login-ocir@v1.3.0
@@ -72,7 +72,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Login to OCI Registry
         id: login-ocir
         uses: oracle-actions/login-ocir@v1.3.0
@@ -99,9 +99,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -134,7 +134,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Login to OCI Registry
         id: login-ocir
         uses: oracle-actions/login-ocir@v1.3.0
@@ -161,7 +161,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Login to OCI Registry
         id: login-ocir
         uses: oracle-actions/login-ocir@v1.3.0
@@ -188,7 +188,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Login to OCI Registry
         id: login-ocir
         uses: oracle-actions/login-ocir@v1.3.0
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d7375552..5f35864b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Setup Rust
         uses: dtolnay/rust-toolchain@master
         with:
@@ -38,7 +38,7 @@ jobs:
         options: --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Apply database migrations
         working-directory: ./database/migrations
         run: TERN_CONF=../../../.github/workflows/tern.conf PGPORT=${{ job.services.postgres.ports[5432] }} ./migrate.sh
@@ -52,7 +52,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Setup Rust
         uses: dtolnay/rust-toolchain@master
         with:
@@ -66,9 +66,9 @@ jobs:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Cache node modules
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ./web/node_modules
           key: ${{ runner.os }}-yarn-${{ hashFiles('**/yarn.lock') }}
diff --git a/clomonitor-apiserver/Dockerfile b/clomonitor-apiserver/Dockerfile
index e00ce938..a6d92efc 100644
--- a/clomonitor-apiserver/Dockerfile
+++ b/clomonitor-apiserver/Dockerfile
@@ -14,7 +14,7 @@ WORKDIR /clomonitor/clomonitor-apiserver
 RUN cargo build --release
 
 # Build frontend
-FROM node:24-alpine3.23 AS frontend-builder
+FROM node:25-alpine3.23 AS frontend-builder
 RUN apk --no-cache add git
 WORKDIR /web
 COPY web .
diff --git a/clomonitor-linter/Dockerfile b/clomonitor-linter/Dockerfile
index be4dfb22..ac723217 100644
--- a/clomonitor-linter/Dockerfile
+++ b/clomonitor-linter/Dockerfile
@@ -14,7 +14,7 @@ WORKDIR /clomonitor/clomonitor-linter
 RUN cargo build --release
 
 # Build OpenSSF scorecard
-FROM golang:1.24.7-alpine3.22 AS scorecard
+FROM golang:1.26.1-alpine3.22 AS scorecard
 WORKDIR /tmp
 RUN apk --no-cache add git make bash gcc musl-dev binutils-gold
 RUN git clone https://github.com/ossf/scorecard
diff --git a/clomonitor-tracker/Dockerfile b/clomonitor-tracker/Dockerfile
index 218a26a4..2709e52d 100644
--- a/clomonitor-tracker/Dockerfile
+++ b/clomonitor-tracker/Dockerfile
@@ -14,7 +14,7 @@ WORKDIR /clomonitor/clomonitor-tracker
 RUN cargo build --release
 
 # Build OpenSSF scorecard
-FROM golang:1.24.7-alpine3.22 AS scorecard
+FROM golang:1.26.1-alpine3.22 AS scorecard
 WORKDIR /tmp
 RUN apk --no-cache add git make bash gcc musl-dev binutils-gold
 RUN git clone https://github.com/ossf/scorecard