diff --git a/.github/actions/connect-integration-test/action.yml b/.github/actions/connect-integration-test/action.yml
index 7645bc8d..5a378557 100644
--- a/.github/actions/connect-integration-test/action.yml
+++ b/.github/actions/connect-integration-test/action.yml
@@ -23,14 +23,14 @@ outputs:
 runs:
   using: "composite"
   steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
 
-    - uses: actions/download-artifact@v4
+    - uses: actions/download-artifact@v8
       with:
         name: ${{ inputs.extension-name }}.tar.gz
         path: integration/bundles
 
-    - uses: astral-sh/setup-uv@v5
+    - uses: astral-sh/setup-uv@v7
       with:
         pyproject-file: "./integration/pyproject.toml"
 
diff --git a/.github/actions/lint-extension/action.yml b/.github/actions/lint-extension/action.yml
index 4492d16c..8e951903 100644
--- a/.github/actions/lint-extension/action.yml
+++ b/.github/actions/lint-extension/action.yml
@@ -117,7 +117,7 @@ runs:
         fi
       shell: bash
        
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@v7
 
     - run: npm install -g semver
       shell: bash
diff --git a/.github/actions/package-extension/action.yml b/.github/actions/package-extension/action.yml
index ff0248bb..5a48ddb7 100644
--- a/.github/actions/package-extension/action.yml
+++ b/.github/actions/package-extension/action.yml
@@ -27,7 +27,7 @@ runs:
     # this avoids including extra files in the extension
     - name: Download optional artifact
       if: ${{ inputs.artifact-name != '' }}
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v8
       with:
         name: ${{ inputs.artifact-name }}
         path: ${{ inputs.extension-name }}
@@ -39,7 +39,7 @@ runs:
 
     # Upload the extension's tarball for use in other actions in the workflow
     - name: Upload extension tar
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: ${{ inputs.extension-name }}.tar.gz
         path: ${{ inputs.extension-name }}.tar.gz
diff --git a/.github/actions/release-extension/action.yml b/.github/actions/release-extension/action.yml
index 2a33d4fc..b3e8cb1a 100644
--- a/.github/actions/release-extension/action.yml
+++ b/.github/actions/release-extension/action.yml
@@ -11,7 +11,7 @@ runs:
   using: "composite"
 
   steps:
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@v7
 
     - run: npm install -g semver
       shell: bash
@@ -80,7 +80,7 @@ runs:
       shell: bash
 
     # Here we download the packaged extension artifact to release
-    - uses: actions/download-artifact@v4
+    - uses: actions/download-artifact@v8
       if: github.ref_name == 'main' && steps.should_release.outputs.should_release == 'true'
       with:
         name: ${{ inputs.extension-name }}.tar.gz
@@ -127,7 +127,7 @@ runs:
     # download each artifact matching the pattern
     - name: Upload release data
       if: github.ref_name == 'main' && steps.should_release.outputs.should_release == 'true'
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: release-${{ inputs.extension-name }}.json
         path: release-${{ inputs.extension-name }}.json
@@ -137,7 +137,7 @@ runs:
     # job can summarize both will-release and won't-release extensions.
     - name: Upload release check data
       if: github.event_name == 'pull_request' && env.MANIFEST_VERSION != '0.0.0'
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: would-release-${{ inputs.extension-name }}.json
         path: would-release-${{ inputs.extension-name }}.json
diff --git a/.github/workflows/connect-integration-tests.yml b/.github/workflows/connect-integration-tests.yml
index 4ca06794..935705af 100644
--- a/.github/workflows/connect-integration-tests.yml
+++ b/.github/workflows/connect-integration-tests.yml
@@ -36,7 +36,7 @@ jobs:
     outputs:
       versions: ${{ steps.versions.outputs.versions }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - id: versions
         working-directory: ./integration
@@ -55,7 +55,7 @@ jobs:
     outputs:
       matrix: ${{ steps.generate_matrix.outputs.matrix }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       
       # This step generates a matrix of compatible extension/version combinations
       # by checking each extension's minimumConnectVersion against available Connect versions
@@ -161,7 +161,7 @@ jobs:
       matrix:
         include: ${{ fromJson(needs.setup-extension-versions.outputs.matrix) }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       # Run the integration test for this extension/version combination
       - uses: ./.github/actions/connect-integration-test
@@ -172,7 +172,7 @@ jobs:
           connect-license: ${{ secrets.CONNECT_LICENSE }}
 
       # Upload the test report XML files as artifacts for use by downstream jobs
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         if: always() && steps.test.outcome != 'cancelled' && steps.test.outcome != 'skipped'
         with:
           name: ${{ matrix.extension }}-${{ matrix.connect_version }}-test-report
@@ -188,7 +188,7 @@ jobs:
       successful_extensions: ${{ steps.collect.outputs.successful_extensions }}
     if: always()
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         id: download
         with:
           path: artifacts
diff --git a/.github/workflows/extensions.yml b/.github/workflows/extensions.yml
index 782414cc..0457fbea 100644
--- a/.github/workflows/extensions.yml
+++ b/.github/workflows/extensions.yml
@@ -21,9 +21,9 @@ jobs:
       releasable: ${{ steps.resolve.outputs.releasable }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: dorny/paths-filter@v3
+      - uses: dorny/paths-filter@v4
         id: changes
         with:
           # Adding a new extension that has a directory that can be TARed?
@@ -97,7 +97,7 @@ jobs:
       GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - uses: ./.github/actions/lint-extension
         with:
@@ -114,7 +114,7 @@ jobs:
       - name: Mark successful jobs
         run: echo "${{ matrix.extension }}" >> ${{ matrix.extension }}.packaged.successfully
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: ${{ matrix.extension }}.packaged.successfully
           path: ${{ matrix.extension }}.packaged.successfully
@@ -127,7 +127,7 @@ jobs:
     outputs:
       successful_extensions: ${{ steps.collect.outputs.successful_extensions }}
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           # Uses artifacts generated from package-extension which are only present if packaging was successful
           pattern: "*.packaged.successfully"
@@ -186,7 +186,7 @@ jobs:
     # otherwise, the release is skipped
     # See the action comments for more details
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       # Skipped for extensions that were only swept in for testing by an
       # infra change; releases require the extension's own files to change
@@ -214,9 +214,9 @@ jobs:
       usage-metrics-dashboard: ${{ steps.resolve.outputs.usage-metrics-dashboard }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: dorny/paths-filter@v3
+      - uses: dorny/paths-filter@v4
         id: changes
         with:
           # Adding a new extension that has a complex build process?
@@ -307,7 +307,7 @@ jobs:
       GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - name: Download release check artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           pattern: would-release-*.json
           path: would-release
@@ -392,7 +392,7 @@ jobs:
       # Downloads every release data file from the release-extension action
       # merging them under the .releases/ directory
       - name: Download GitHub release data
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           pattern: release-*.json
           path: releases
@@ -424,7 +424,7 @@ jobs:
     steps:
       - name: Generate token for GitHub App
         id: generate-token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
         with:
           app-id: 1129585
           private-key: ${{ secrets.POSIT_CONNECT_PROJECTS_PEM }}
@@ -433,12 +433,12 @@ jobs:
       # Checkout main to commit the updated extension list
       # reduces the chance of conflicts when updating the extension list with
       # multiple running workflows
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: main
           token: ${{ steps.generate-token.outputs.token }}
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: "lts/*"
           cache: "npm"
diff --git a/.github/workflows/package-vulnerability-scanner.yml b/.github/workflows/package-vulnerability-scanner.yml
index f4c760c7..bf854393 100644
--- a/.github/workflows/package-vulnerability-scanner.yml
+++ b/.github/workflows/package-vulnerability-scanner.yml
@@ -18,7 +18,7 @@ jobs:
 
     steps:
       # Checkout the repository so the rest of the actions can run with no issue
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       # We want to fail quickly if the linting fails, do that first
       - uses: ./.github/actions/lint-extension
@@ -27,7 +27,7 @@ jobs:
 
       # Publisher Command Center needs to setup node, install dependencies, and
       # build to make the files needed for the extension
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: "lts/*"
           cache: "npm"
@@ -42,7 +42,7 @@ jobs:
       # This only includes necessary files for the extension to run leaving out
       # the files that were used to build the /dist/ directory
       - name: Upload built extension
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ${{ env.EXTENSION_NAME }}
           path: |
@@ -73,7 +73,7 @@ jobs:
     # version has been updated
     steps:
       # Checkout the repository so the rest of the actions can run with no issue
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - uses: ./.github/actions/release-extension
         with:
diff --git a/.github/workflows/publisher-command-center.yml b/.github/workflows/publisher-command-center.yml
index 2e03c5fa..a0f713bb 100644
--- a/.github/workflows/publisher-command-center.yml
+++ b/.github/workflows/publisher-command-center.yml
@@ -18,7 +18,7 @@ jobs:
 
     steps:
       # Checkout the repository so the rest of the actions can run with no issue
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       # We want to fail quickly if the linting fails, do that first
       - uses: ./.github/actions/lint-extension
@@ -27,7 +27,7 @@ jobs:
 
       # Publisher Command Center needs to setup node, install dependencies, and
       # build to make the files needed for the extension
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: "lts/*"
           cache: "npm"
@@ -42,7 +42,7 @@ jobs:
       # This only includes necessary files for the extension to run leaving out
       # the files that were used to build the /dist/ directory
       - name: Upload built extension
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ${{ env.EXTENSION_NAME }}
           path: |
@@ -74,7 +74,7 @@ jobs:
     # version has been updated
     steps:
       # Checkout the repository so the rest of the actions can run with no issue
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - uses: ./.github/actions/release-extension
         with:
diff --git a/.github/workflows/runtime-version-scanner.yml b/.github/workflows/runtime-version-scanner.yml
index 0accdd83..c11dbda8 100644
--- a/.github/workflows/runtime-version-scanner.yml
+++ b/.github/workflows/runtime-version-scanner.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       # Checkout the repository so the rest of the actions can run with no issue
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       # We want to fail quickly if the linting fails, do that first
       - uses: ./.github/actions/lint-extension
@@ -51,7 +51,7 @@ jobs:
       # This only includes necessary files for the extension to run leaving out
       # the files that were used to build the /dist/ directory
       - name: Upload built extension
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ${{ env.EXTENSION_NAME }}
           # Replace the below with the files your content needs
@@ -86,7 +86,7 @@ jobs:
     # version has been updated
     steps:
       # Checkout the repository so the rest of the actions can run with no issue
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - uses: ./.github/actions/release-extension
         with:
diff --git a/.github/workflows/usage-metrics-dashboard.yml b/.github/workflows/usage-metrics-dashboard.yml
index 773bec21..5d0c3c14 100644
--- a/.github/workflows/usage-metrics-dashboard.yml
+++ b/.github/workflows/usage-metrics-dashboard.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       # Checkout the repository so the rest of the actions can run with no issue
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       # We want to fail quickly if the linting fails, do that first
       - uses: ./.github/actions/lint-extension
@@ -51,7 +51,7 @@ jobs:
       # This only includes necessary files for the extension to run leaving out
       # the files that were used to build the /dist/ directory
       - name: Upload built extension
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ${{ env.EXTENSION_NAME }}
           # Replace the below with the files your content needs
@@ -83,7 +83,7 @@ jobs:
     # version has been updated
     steps:
       # Checkout the repository so the rest of the actions can run with no issue
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - uses: ./.github/actions/release-extension
         with:
diff --git a/.github/workflows/weekly-integration-tests.yml b/.github/workflows/weekly-integration-tests.yml
index 99a0bd2e..5b16ba43 100644
--- a/.github/workflows/weekly-integration-tests.yml
+++ b/.github/workflows/weekly-integration-tests.yml
@@ -17,7 +17,7 @@ jobs:
     outputs:
       extensions: ${{ steps.list.outputs.extensions }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - id: list
         run: |
@@ -40,7 +40,7 @@ jobs:
       matrix:
         extension: ${{ fromJSON(needs.discover-extensions.outputs.extensions) }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - uses: ./.github/actions/lint-extension
         with:
@@ -51,7 +51,7 @@ jobs:
       # Without this the deployed app fails at startup mounting `dist/`.
       - name: Set up Node
         if: ${{ hashFiles(format('extensions/{0}/package.json', matrix.extension)) != '' }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
           node-version: "lts/*"
           cache: "npm"
@@ -73,7 +73,7 @@ jobs:
       - name: Mark successful package
         run: echo "${{ matrix.extension }}" >> ${{ matrix.extension }}.packaged.successfully
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: ${{ matrix.extension }}.packaged.successfully
           path: ${{ matrix.extension }}.packaged.successfully
@@ -87,7 +87,7 @@ jobs:
     outputs:
       extensions: ${{ steps.collect.outputs.extensions }}
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           pattern: "*.packaged.successfully"
           path: packages
@@ -123,7 +123,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Notify Slack of CI failure
-        uses: slackapi/slack-github-action@v2.1.1
+        uses: slackapi/slack-github-action@v4.0.0
         with:
           webhook: ${{ secrets.SLACK_WEBHOOK }}
           webhook-type: incoming-webhook