diff --git a/.github/workflows/check-docs.yml b/.github/workflows/check-docs.yml
index 115ff36..50bc207 100644
--- a/.github/workflows/check-docs.yml
+++ b/.github/workflows/check-docs.yml
@@ -21,12 +21,12 @@ jobs:
         if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v4
-            - uses: actions/setup-python@v5
+            - uses: actions/checkout@v6
+            - uses: actions/setup-python@v6
               with:
                 python-version: 3.9
             - name: pip cache
-              uses: actions/cache@v4
+              uses: actions/cache@v5
               with:
                   path: ~/.cache/pip
                   key: ${{ runner.os }}-pip-docs-${{ hashFiles('requirements/docs.txt') }}
diff --git a/.github/workflows/check_migrations_sqlite.yml b/.github/workflows/check_migrations_sqlite.yml
index cbcbc69..ba98883 100644
--- a/.github/workflows/check_migrations_sqlite.yml
+++ b/.github/workflows/check_migrations_sqlite.yml
@@ -28,7 +28,7 @@ jobs:
           echo "Acquire::Check-Valid-Until \"false\";" > /etc/apt/apt.conf.d/99archive
           apt-get -y -qq update
           apt-get install -y build-essential tcl git-lfs
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
         with:
           lfs: true
@@ -45,7 +45,7 @@ jobs:
           'import sqlite3; assert sqlite3.connect(":memory").execute("select sqlite_version()").fetchone()[0] == "3.25.3"'
           # Once we have confirmed that this works, set it for subsequent steps
           echo "LD_PRELOAD=$(realpath .libs/libsqlite3.so)" >> $GITHUB_ENV
-      - uses: actions/cache@v4
+      - uses: actions/cache@v5
         if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
         with:
           path: ~/.cache/pip
diff --git a/.github/workflows/python-publish.yml b/.github/workflows/python-publish.yml
index 7391a0d..4fab217 100644
--- a/.github/workflows/python-publish.yml
+++ b/.github/workflows/python-publish.yml
@@ -16,9 +16,9 @@ jobs:
   deploy:
     runs-on: ubuntu-22.04
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     - name: Set up Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@v6
       with:
         python-version: 3.9
     - name: Install dependencies
diff --git a/.github/workflows/tox.yml b/.github/workflows/tox.yml
index 09d6622..86df037 100644
--- a/.github/workflows/tox.yml
+++ b/.github/workflows/tox.yml
@@ -22,10 +22,10 @@ jobs:
       matrix:
         python-version: [3.9, '3.10', '3.11', '3.12', '3.13']
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Set up Python ${{ matrix.python-version }}
         if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install tox
@@ -35,7 +35,7 @@ jobs:
           pip install tox
       - name: tox env cache
         if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ${{ github.workspace }}/.tox/py${{ matrix.python-version }}
           key: ${{ runner.os }}-tox-py${{ matrix.python-version }}-${{ hashFiles('setup.py', 'requirements/*.txt') }}
@@ -53,7 +53,7 @@ jobs:
     container:
       image: python:${{ matrix.python-version }}-buster
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Install tox
         if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
         run: |
@@ -61,7 +61,7 @@ jobs:
           pip install tox
       - name: tox env cache
         if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ${{ github.workspace }}/.tox/py${{ matrix.python-version }}
           key: ${{ runner.os }}-tox-py${{ matrix.python-version }}-${{ hashFiles('setup.py', 'requirements/*.txt') }}
@@ -79,10 +79,10 @@ jobs:
       matrix:
         python-version: [3.9, '3.10', '3.11', '3.12', '3.13']
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Set up Python ${{ matrix.python-version }}
         if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install system dependencies
@@ -97,7 +97,7 @@ jobs:
           pip install tox
       - name: tox env cache
         if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ${{ github.workspace }}/.tox/py${{ matrix.python-version }}-cryptography${{ env.cryptography_version }}
           key: ${{ runner.os }}-tox-py${{ matrix.python-version }}-crypto${{ env.cryptography_version }}-${{ hashFiles('setup.py', 'requirements/*.txt') }}
@@ -117,7 +117,7 @@ jobs:
     container:
       image: python:${{ matrix.python-version }}-buster
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Install system dependencies
         if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
         run: |
@@ -133,7 +133,7 @@ jobs:
           pip install tox
       - name: tox env cache
         if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ${{ github.workspace }}/.tox/py${{ matrix.python-version }}-cryptography${{ env.cryptography_version }}
           key: ${{ runner.os }}-tox-py${{ matrix.python-version }}-crypto${{ env.cryptography_version }}-${{ hashFiles('setup.py', 'requirements/*.txt') }}
@@ -161,10 +161,10 @@ jobs:
           # Maps tcp port 5432 on service container to the host
           - 5432:5432
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Set up Python 3.9 for Postgres
         if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: 3.9
       - name: Install tox
@@ -174,7 +174,7 @@ jobs:
           pip install tox
       - name: tox env cache
         if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ${{ github.workspace }}/.tox/py3.9-postgres
           key: ${{ runner.os }}-tox-py3.9-postgres-${{ hashFiles('setup.py', 'requirements/*.txt') }}
@@ -190,10 +190,10 @@ jobs:
       matrix:
         python-version: [3.8]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Set up Python ${{ matrix.python-version }}
         if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install tox