diff --git a/.github/workflows/add-device.yml b/.github/workflows/add-device.yml
index ec38974d..ce88a933 100644
--- a/.github/workflows/add-device.yml
+++ b/.github/workflows/add-device.yml
@@ -11,7 +11,7 @@ jobs:
     env:
       ISSUE_CONTENT: ${{ github.event.issue.body }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Parse issue body
         id: handle-add-device
         run: |
@@ -26,7 +26,7 @@ jobs:
       - name: Make pull request
         if: steps.handle-add-device.outputs.success == 'true'
         id: cpr
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           commit-message: "[add device]: ${{ steps.handle-add-device.outputs.device }}"
diff --git a/.github/workflows/build-manager.yml b/.github/workflows/build-manager.yml
index ee855437..4153feca 100644
--- a/.github/workflows/build-manager.yml
+++ b/.github/workflows/build-manager.yml
@@ -24,12 +24,12 @@ jobs:
       run:
         working-directory: manager
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-java@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-java@v6
         with:
           distribution: temurin
           java-version: "17"
-      - uses: gradle/actions/setup-gradle@v4
-      - uses: android-actions/setup-android@v3
+      - uses: gradle/actions/setup-gradle@v5
+      - uses: android-actions/setup-android@v4
       - run: chmod +x gradlew
       - run: ./gradlew :app:assembleDebug --no-daemon --stacktrace
diff --git a/.github/workflows/build-su.yml b/.github/workflows/build-su.yml
index 2c7447a5..59cace5f 100644
--- a/.github/workflows/build-su.yml
+++ b/.github/workflows/build-su.yml
@@ -15,7 +15,7 @@ jobs:
     name: Build userspace su
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         fetch-depth: 0
     - name: Setup need_upload
@@ -30,7 +30,7 @@ jobs:
       working-directory: ./userspace/su
       run: $ANDROID_NDK/ndk-build
     - name: Upload a Build Artifact
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: su
         path: ./userspace/su/libs
diff --git a/.github/workflows/check-line-ending.yml b/.github/workflows/check-line-ending.yml
index ccd08b75..33829334 100644
--- a/.github/workflows/check-line-ending.yml
+++ b/.github/workflows/check-line-ending.yml
@@ -13,7 +13,7 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Reject CRLF in source files
         run: |
           files="$(git grep -Il $'\r' -- '*.sh' '*.rs' '*.kt' '*.kts' '*.xml' '*.yml' '*.yaml' || true)"
diff --git a/.github/workflows/clang-format.yml b/.github/workflows/clang-format.yml
index 55b6abb5..5cd4c636 100644
--- a/.github/workflows/clang-format.yml
+++ b/.github/workflows/clang-format.yml
@@ -26,7 +26,7 @@ jobs:
   format:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: check
         working-directory: kernel
diff --git a/.github/workflows/clippy.yml b/.github/workflows/clippy.yml
index b60dda74..2245361d 100644
--- a/.github/workflows/clippy.yml
+++ b/.github/workflows/clippy.yml
@@ -22,8 +22,8 @@ jobs:
   clippy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: android-actions/setup-android@v3
+      - uses: actions/checkout@v7
+      - uses: android-actions/setup-android@v4
       - run: sdkmanager "ndk;29.0.14206865"
       - uses: dtolnay/rust-toolchain@stable
         with:
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index ba49057a..07a72484 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -26,16 +26,16 @@ jobs:
       run:
         working-directory: manager
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-java@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-java@v6
         with:
           distribution: temurin
           java-version: "17"
-      - uses: android-actions/setup-android@v3
-      - uses: github/codeql-action/init@v3
+      - uses: android-actions/setup-android@v4
+      - uses: github/codeql-action/init@v4
         with:
           languages: java-kotlin
-      - uses: gradle/actions/setup-gradle@v4
+      - uses: gradle/actions/setup-gradle@v5
       - run: chmod +x gradlew
       - run: ./gradlew :app:assembleDebug --no-daemon
-      - uses: github/codeql-action/analyze@v3
+      - uses: github/codeql-action/analyze@v4
diff --git a/.github/workflows/crowdin.yml b/.github/workflows/crowdin.yml
index ac979cf4..20f6386c 100644
--- a/.github/workflows/crowdin.yml
+++ b/.github/workflows/crowdin.yml
@@ -15,10 +15,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Crowdin Action
-      uses: crowdin/github-action@v2
+      uses: crowdin/github-action@v3
       with:
         upload_sources: true
         upload_translations: true
diff --git a/.github/workflows/ddk-lkm.yml b/.github/workflows/ddk-lkm.yml
index d0c9543e..fdda0436 100644
--- a/.github/workflows/ddk-lkm.yml
+++ b/.github/workflows/ddk-lkm.yml
@@ -33,7 +33,7 @@ jobs:
 
     steps:
     - name: Checkout source code
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Build kernelsu.ko
       env:
diff --git a/.github/workflows/deploy-website.yml b/.github/workflows/deploy-website.yml
index da12c396..63062224 100644
--- a/.github/workflows/deploy-website.yml
+++ b/.github/workflows/deploy-website.yml
@@ -33,20 +33,20 @@ jobs:
         working-directory: ./website
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0 # Not needed if lastUpdated is not enabled
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
           node-version: 20
       - name: Setup pnpm
-        uses: pnpm/action-setup@v2
+        uses: pnpm/action-setup@v6
         with:
           version: 10.17.1
 
       - name: Setup Pages
-        uses: actions/configure-pages@v5
+        uses: actions/configure-pages@v6
 
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
@@ -57,7 +57,7 @@ jobs:
           touch docs/.vitepress/dist/.nojekyll
 
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@v5
         with:
           path: website/docs/.vitepress/dist
 
@@ -74,5 +74,5 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5
 
diff --git a/.github/workflows/ksud-extra.yml b/.github/workflows/ksud-extra.yml
index 21489822..92126d6a 100644
--- a/.github/workflows/ksud-extra.yml
+++ b/.github/workflows/ksud-extra.yml
@@ -21,7 +21,7 @@ jobs:
   build:
     runs-on: ${{ inputs.os }}
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         fetch-depth: 0
 
diff --git a/.github/workflows/ksud.yml b/.github/workflows/ksud.yml
index 6d0ebe17..f3aecb5e 100644
--- a/.github/workflows/ksud.yml
+++ b/.github/workflows/ksud.yml
@@ -17,7 +17,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         fetch-depth: 0
 
diff --git a/.github/workflows/ksuinit.yml b/.github/workflows/ksuinit.yml
index 043ab36e..cd8124f0 100644
--- a/.github/workflows/ksuinit.yml
+++ b/.github/workflows/ksuinit.yml
@@ -10,7 +10,7 @@ jobs:
   build:
     runs-on: ${{ inputs.os }}
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         fetch-depth: 0
         
diff --git a/.github/workflows/publish-lkm-artifacts.yml b/.github/workflows/publish-lkm-artifacts.yml
index aa5f533f..d99fb23e 100644
--- a/.github/workflows/publish-lkm-artifacts.yml
+++ b/.github/workflows/publish-lkm-artifacts.yml
@@ -29,7 +29,7 @@ jobs:
           path: lkm
 
       - name: Publish LKM files to draft release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           tag_name: ${{ inputs.release_tag }}
           draft: true
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 91e59281..3ed76ad4 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -65,7 +65,7 @@ jobs:
         run: ls -R
 
       - name: release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           token: ${{ secrets.GH_TOKEN }}
           files: |
diff --git a/.github/workflows/rustfmt.yml b/.github/workflows/rustfmt.yml
index 94502952..48214bb6 100644
--- a/.github/workflows/rustfmt.yml
+++ b/.github/workflows/rustfmt.yml
@@ -19,7 +19,7 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: rustfmt
diff --git a/.github/workflows/shellcheck.yml b/.github/workflows/shellcheck.yml
index 25ac771f..8a24c16f 100644
--- a/.github/workflows/shellcheck.yml
+++ b/.github/workflows/shellcheck.yml
@@ -19,7 +19,7 @@ jobs:
   shellcheck:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: ludeeus/action-shellcheck@2.0.0
         with:
           ignore_names: gradlew