diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 8ca96748ff..94c8e0eb10 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -36,17 +36,17 @@ jobs:
           - { os: 'windows-latest', java: '26' }
       fail-fast: false
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         fetch-depth: 0
         submodules: recursive
     - name: Java ${{ matrix.Java }} (${{ matrix.os }})
-      uses: actions/setup-java@v5
+      uses: actions/setup-java@v6
       with:
         java-version: ${{ matrix.java }}
         distribution: 'zulu'
     - name: Cache Maven packages
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
          path: ~/.m2/repository
          key: ${{ runner.os }}-m2-repository-${{ hashFiles('**/pom.xml') }}
@@ -62,7 +62,7 @@ jobs:
         MAVEN_OPTS: -Dhttps.protocols=TLSv1.2 -Dmaven.wagon.httpconnectionManager.ttlSeconds=120 -Dmaven.wagon.http.retryHandler.requestSentEnabled=true -Dmaven.wagon.http.retryHandler.count=10
       run: mvn --batch-mode --errors --update-snapshots verify --file pom.xml ${{ steps.maven-profile-flag.outputs.MAVEN_PROFILE_FLAG }}
     - name: Upload artifacts
-      uses: actions/upload-artifact@v6
+      uses: actions/upload-artifact@v7
       with:
         name: ${{ matrix.os }}-${{ matrix.java }}
         retention-days: 5
@@ -292,13 +292,13 @@ jobs:
           docker inspect --format="{{json .State.Health.Status}}" openam-sp | grep -q \"healthy\"
 
       - name: Cache Playwright browsers
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: ~/.cache/ms-playwright
           key: ${{ runner.os }}-playwright-browsers
           restore-keys: ${{ runner.os }}-playwright-
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           sparse-checkout: e2e
 
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 040e1d1fd7..1b3aba5536 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -21,13 +21,13 @@ jobs:
         env:
           GITHUB_CONTEXT: ${{ toJSON(github) }}
         run: echo "$GITHUB_CONTEXT"
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           submodules: recursive
           ref: ${{ github.event.workflow_run.head_branch }}
       - name: Set up Java for publishing to Maven Central Repository OSS
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v6
         with:
           java-version: ${{ github.event.workflow_run.head_branch == 'sustaining/15.2.x' && '8' || '11'}}
           distribution: 'zulu'
@@ -35,7 +35,7 @@ jobs:
           server-username: MAVEN_USERNAME
           server-password: MAVEN_PASSWORD
       - name: Cache Maven packages
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
          path: ~/.m2/repository
          key: ${{ runner.os }}-m2-repository-${{ hashFiles('**/pom.xml') }}
@@ -70,42 +70,42 @@ jobs:
             -pl '-:openam-example-api-descriptor,-:openam-example-clientsdk-cli,-:openam-example-clientsdk-war' \
             -pl '-:bcpkix-shaded' -pl '-:jato-shaded'
       - name: Upload artifacts OpenAM Distribution Kit, containing all distributable artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
          name: OpenAM Distribution Kit, containing all distributable artifacts
          path: openam-distribution/openam-distribution-kit/target/*.zip
       - name: Upload artifacts OpenAM Distribution SSO Configurator Tools Kit
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
          name: OpenAM Distribution SSO Configurator Tools Kit
          path: openam-distribution/openam-distribution-ssoconfiguratortools/target/*.zip        
       - name: Upload artifacts OpenAM Distribution Fedlet UnConfigured zip
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
          name: OpenAM Distribution Fedlet UnConfigured zip
          path: openam-distribution/openam-distribution-fedlet-unconfigured/target/*.zip         
       - name: Upload artifacts OpenAM Distribution SSO Admin Tools Kit
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
          name: OpenAM Distribution SSO Admin Tools Kit
          path: openam-distribution/openam-distribution-ssoadmintools/target/*.zip                    
       - name: Upload artifacts OpenAM Admin Console
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
          name: OpenAM Admin Console
          path: openam-console/target/*.war               
       - name: Upload artifacts OpenAM Server Component
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
          name: OpenAM Server Component
          path: openam-server/target/*.war          
       - name: Upload artifacts OpenAM Server Only Component
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
          name: OpenAM Server Only Component
          path: openam-server-only/target/*.war         
       - name: Upload artifacts OpenAM Dockerfile
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
          name: OpenAM Dockerfile
          path: openam-distribution/openam-distribution-docker/Dockerfile*
@@ -114,7 +114,7 @@ jobs:
           git config --global user.name "Open Identity Platform Community"
           git config --global user.email "open-identity-platform-opendj@googlegroups.com"
           cd ..
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         continue-on-error: true
         with:
           repository: ${{ github.repository }}.wiki
@@ -134,7 +134,7 @@ jobs:
           git commit -a -m "upload docs after deploy ${{ github.sha }}"
           git push --quiet --force
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         continue-on-error: true
         with:
           repository: OpenIdentityPlatform/doc.openidentityplatform.org
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a5d0519599..128491c67b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -26,12 +26,12 @@ jobs:
         env:
           GITHUB_CONTEXT: ${{ toJSON(github) }}
         run: echo "$GITHUB_CONTEXT"
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           submodules: recursive
       - name: Set up Java for publishing to Maven Central Repository OSS
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v6
         with:
           java-version: ${{ github.event.workflow_run.head_branch == 'sustaining/15.2.x' && '8' || '11'}}
           distribution: 'zulu'
@@ -77,7 +77,7 @@ jobs:
             target/checkout/openam-server/target/*.war
             target/checkout/openam-server-only/target/*.war
             target/checkout/openam-distribution/openam-distribution-docker/target/Dockerfile*
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         continue-on-error: true
         with:
           repository: ${{ github.repository }}.wiki
@@ -100,7 +100,7 @@ jobs:
           git push --quiet --force
           git push --quiet --force origin ${{ github.event.inputs.releaseVersion }}
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         continue-on-error: true
         with:
           repository: OpenIdentityPlatform/doc.openidentityplatform.org
@@ -125,7 +125,7 @@ jobs:
     needs:
       - release-maven
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event.inputs.releaseVersion }}
           fetch-depth: 1