diff --git a/.github/workflows/build-containers.yml b/.github/workflows/build-containers.yml
index 9dc1bd7..3236d3a 100644
--- a/.github/workflows/build-containers.yml
+++ b/.github/workflows/build-containers.yml
@@ -29,13 +29,13 @@ jobs:
       packages: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Log in to Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
@@ -43,7 +43,7 @@ jobs:
 
       - name: Extract metadata
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: ${{ env.REGISTRY }}/${{ github.repository_owner }}/quantecon
           tags: |
@@ -51,7 +51,7 @@ jobs:
             type=sha,prefix={{branch}}-
 
       - name: Build and push quantecon container
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           context: containers/quantecon
           file: containers/quantecon/Dockerfile
@@ -70,13 +70,13 @@ jobs:
       packages: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Log in to Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
@@ -84,7 +84,7 @@ jobs:
 
       - name: Extract metadata
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: ${{ env.REGISTRY }}/${{ github.repository_owner }}/quantecon-build
           tags: |
@@ -92,7 +92,7 @@ jobs:
             type=sha,prefix={{branch}}-
 
       - name: Build and push quantecon-build container
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           context: containers/quantecon-build
           file: containers/quantecon-build/Dockerfile
diff --git a/.github/workflows/check-latex-versions.yml b/.github/workflows/check-latex-versions.yml
index 8d6a90a..479fe4f 100644
--- a/.github/workflows/check-latex-versions.yml
+++ b/.github/workflows/check-latex-versions.yml
@@ -9,7 +9,7 @@ jobs:
   check-versions:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       
       - name: Check LaTeX Package Versions
         run: ./scripts/check-latex-versions.sh
diff --git a/.github/workflows/test-container.yml b/.github/workflows/test-container.yml
index 363666c..e0c4f95 100644
--- a/.github/workflows/test-container.yml
+++ b/.github/workflows/test-container.yml
@@ -17,7 +17,7 @@ jobs:
     if: ${{ github.event.workflow_run.conclusion == 'success' || github.event_name == 'workflow_dispatch' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           # Test files must match the commit that built the image. For
           # workflow_run events checkout defaults to the default branch, not the
@@ -25,7 +25,7 @@ jobs:
           ref: ${{ github.event.workflow_run.head_sha || github.sha }}
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -63,7 +63,7 @@ jobs:
     if: ${{ github.event.workflow_run.conclusion == 'success' || github.event_name == 'workflow_dispatch' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           # Test files must match the commit that built the image. For
           # workflow_run events checkout defaults to the default branch, not the
@@ -71,7 +71,7 @@ jobs:
           ref: ${{ github.event.workflow_run.head_sha || github.sha }}
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -106,7 +106,7 @@ jobs:
           docker images ghcr.io/quantecon/quantecon-build:latest --format "quantecon-build (lean): {{.Size}}"
 
       - name: Upload test artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         if: always()
         with:
           name: test-outputs-lean
diff --git a/.github/workflows/test-containers-lectures.yml b/.github/workflows/test-containers-lectures.yml
index 65fa487..593ba95 100644
--- a/.github/workflows/test-containers-lectures.yml
+++ b/.github/workflows/test-containers-lectures.yml
@@ -56,7 +56,7 @@ jobs:
 
     steps:
       - name: Checkout actions repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           # Use the composite actions from the commit that built the container
           # under test. workflow_run checks out the default branch by default;
@@ -65,7 +65,7 @@ jobs:
           path: actions-repo
 
       - name: Checkout lecture repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           repository: ${{ matrix.repo.owner }}/${{ matrix.repo.repo }}
           path: lecture-repo
@@ -105,7 +105,7 @@ jobs:
 
       - name: Upload build artifacts
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: build-${{ matrix.container }}-${{ matrix.repo.repo }}
           path: lecture-repo/_build
diff --git a/build-jupyter-cache/action.yml b/build-jupyter-cache/action.yml
index 3e6dc25..9cbf4e5 100644
--- a/build-jupyter-cache/action.yml
+++ b/build-jupyter-cache/action.yml
@@ -250,14 +250,14 @@ runs:
     
     - name: Save build cache
       if: steps.verify-builds.outputs.all-passed == 'true'
-      uses: actions/cache/save@v4
+      uses: actions/cache/save@v5
       with:
         path: _build
         key: ${{ steps.cache-key.outputs.key }}
 
     - name: Save execution cache
       if: steps.verify-builds.outputs.all-passed == 'true'
-      uses: actions/cache/save@v4
+      uses: actions/cache/save@v5
       with:
         path: _build/.jupyter_cache
         key: jupyter-cache-${{ hashFiles(format('{0}/**/*.md', inputs.source-dir)) }}-${{ github.run_id }}
@@ -271,7 +271,7 @@ runs:
       # 30-day artifact; only upload when a build failed (the cache is not saved
       # then), making the artifact the sole copy for debugging.
       if: inputs.upload-artifact == 'true' && steps.verify-builds.outputs.all-passed != 'true'
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: build-cache-${{ github.run_id }}
         path: _build
diff --git a/build-lectures/action.yml b/build-lectures/action.yml
index 99a46d7..7b2e993 100644
--- a/build-lectures/action.yml
+++ b/build-lectures/action.yml
@@ -167,7 +167,7 @@ runs:
 
     - name: Upload execution reports on failure
       if: inputs.upload-failure-reports == 'true' && failure()
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: ${{ inputs.failure-artifact-name != '' && inputs.failure-artifact-name || format('execution-reports-{0}', inputs.builder) }}
         path: |
diff --git a/preview-cloudflare/action.yml b/preview-cloudflare/action.yml
index 2045365..9c292a0 100644
--- a/preview-cloudflare/action.yml
+++ b/preview-cloudflare/action.yml
@@ -113,7 +113,7 @@ runs:
 
     - name: Comment on PR
       if: steps.check-trust.outputs.skip != 'true' && github.event_name == 'pull_request' && steps.deploy.outputs.deploy-url != ''
-      uses: actions/github-script@v7
+      uses: actions/github-script@v9
       env:
         DEPLOY_URL: ${{ steps.deploy.outputs.deploy-url }}
         CHANGED_FILES: ${{ steps.detect-changes.outputs.changed-files }}
diff --git a/preview-netlify/action.yml b/preview-netlify/action.yml
index 98036ca..08afc20 100644
--- a/preview-netlify/action.yml
+++ b/preview-netlify/action.yml
@@ -99,7 +99,7 @@ runs:
 
     - name: Comment on PR
       if: steps.check-trust.outputs.skip != 'true' && github.event_name == 'pull_request' && steps.deploy.outputs.deploy-url != ''
-      uses: actions/github-script@v7
+      uses: actions/github-script@v9
       env:
         DEPLOY_URL: ${{ steps.deploy.outputs.deploy-url }}
         CHANGED_FILES: ${{ steps.detect-changes.outputs.changed-files }}
diff --git a/publish-gh-pages/action.yml b/publish-gh-pages/action.yml
index e5a7b99..a6ddbee 100644
--- a/publish-gh-pages/action.yml
+++ b/publish-gh-pages/action.yml
@@ -66,16 +66,16 @@ runs:
         echo "✅ Preparation complete"
 
     - name: Setup Pages
-      uses: actions/configure-pages@v4
+      uses: actions/configure-pages@v6
 
     - name: Upload Pages artifact
-      uses: actions/upload-pages-artifact@v3
+      uses: actions/upload-pages-artifact@v5
       with:
         path: ${{ inputs.build-dir }}
 
     - name: Deploy to GitHub Pages
       id: deployment
-      uses: actions/deploy-pages@v4
+      uses: actions/deploy-pages@v5
 
     - name: Create release assets
       id: create-assets
@@ -144,7 +144,7 @@ runs:
     - name: Upload release assets
       id: upload-release
       if: inputs.create-release-assets == 'true' && steps.create-assets.outputs.assets-created == 'true'
-      uses: softprops/action-gh-release@v2
+      uses: softprops/action-gh-release@v3
       with:
         files: |
           ${{ steps.create-assets.outputs.archive-name }}
diff --git a/restore-jupyter-cache/action.yml b/restore-jupyter-cache/action.yml
index 4dbd7f3..a43ee1a 100644
--- a/restore-jupyter-cache/action.yml
+++ b/restore-jupyter-cache/action.yml
@@ -105,7 +105,7 @@ runs:
     - name: Restore cache (read-only)
       id: restore-readonly
       if: inputs.save-cache != 'true'
-      uses: actions/cache/restore@v4
+      uses: actions/cache/restore@v5
       with:
         path: ${{ steps.cache-path.outputs.path }}
         key: ${{ steps.cache-key.outputs.key }}
@@ -114,7 +114,7 @@ runs:
     - name: Restore cache (with save at job end)
       id: restore-save
       if: inputs.save-cache == 'true'
-      uses: actions/cache@v4
+      uses: actions/cache@v5
       with:
         path: ${{ steps.cache-path.outputs.path }}
         key: ${{ steps.cache-key.outputs.key }}
diff --git a/setup-environment/action.yml b/setup-environment/action.yml
index baa5d35..fa5b178 100644
--- a/setup-environment/action.yml
+++ b/setup-environment/action.yml
@@ -107,7 +107,7 @@ runs:
 
     - name: Setup Miniconda (non-container mode)
       if: steps.detect-container.outputs.container-mode == 'false'
-      uses: conda-incubator/setup-miniconda@v3
+      uses: conda-incubator/setup-miniconda@v4
       with:
         # No environment-file here: the env is restored from cache (hit) or
         # created by the "Create/update environment" step below (miss), so a
@@ -121,7 +121,7 @@ runs:
 
     - name: Cache Conda environment (non-container mode)
       if: steps.detect-container.outputs.container-mode == 'false'
-      uses: actions/cache@v4
+      uses: actions/cache@v5
       id: conda-cache
       with:
         path: ${{ env.CONDA }}/envs