diff --git a/.github/workflows/appimage10.yml b/.github/workflows/appimage10.yml
index d204e173..f42db1ac 100644
--- a/.github/workflows/appimage10.yml
+++ b/.github/workflows/appimage10.yml
@@ -17,7 +17,7 @@ jobs:
       contents: write # action-gh-release
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 149 # enough to cover between tags
           #fetch-tags: true # this should work see actions/checkout~issue#1471
@@ -154,7 +154,7 @@ jobs:
 
       - name: Upload Release Asset
         if: ${{ env.MY_GITHUB_TAG != '' }} # if: ${{ github.ref_type == 'tag' }}
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           body_path: ${{ github.workspace }}/appimage/10/RELEASE-NOTES-GH.txt
           files: |
@@ -163,7 +163,7 @@ jobs:
 
       - name: Upload Artifact
         #if: ${{ env.MY_GITHUB_TAG == '' }} # commented out to always upload
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ${{env.MAGIC_APPIMAGE_OUTPUT_FILENAME}}
           path: |
diff --git a/.github/workflows/appimage7.yml b/.github/workflows/appimage7.yml
index 568f6716..90b789b9 100644
--- a/.github/workflows/appimage7.yml
+++ b/.github/workflows/appimage7.yml
@@ -17,7 +17,7 @@ jobs:
       contents: write # action-gh-release
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 149 # enough to cover between tags
           #fetch-tags: true # this should work see actions/checkout~issue#1471
@@ -154,7 +154,7 @@ jobs:
 
       - name: Upload Release Asset
         if: ${{ env.MY_GITHUB_TAG != '' }} # if: ${{ github.ref_type == 'tag' }}
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           body_path: ${{ github.workspace }}/appimage/7/RELEASE-NOTES-GH.txt
           files: |
@@ -163,7 +163,7 @@ jobs:
 
       - name: Upload Artifact
         #if: ${{ env.MY_GITHUB_TAG == '' }} # commented out to always upload
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ${{env.MAGIC_APPIMAGE_OUTPUT_FILENAME}}
           path: |
diff --git a/.github/workflows/appimage8.yml b/.github/workflows/appimage8.yml
index 53251aef..37457c8a 100644
--- a/.github/workflows/appimage8.yml
+++ b/.github/workflows/appimage8.yml
@@ -17,7 +17,7 @@ jobs:
       contents: write # action-gh-release
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 149 # enough to cover between tags
           #fetch-tags: true # this should work see actions/checkout~issue#1471
@@ -154,7 +154,7 @@ jobs:
 
       - name: Upload Release Asset
         if: ${{ env.MY_GITHUB_TAG != '' }} # if: ${{ github.ref_type == 'tag' }}
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           body_path: ${{ github.workspace }}/appimage/8/RELEASE-NOTES-GH.txt
           files: |
@@ -163,7 +163,7 @@ jobs:
 
       - name: Upload Artifact
         #if: ${{ env.MY_GITHUB_TAG == '' }} # commented out to always upload
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ${{env.MAGIC_APPIMAGE_OUTPUT_FILENAME}}
           path: |
diff --git a/.github/workflows/appimage9.yml b/.github/workflows/appimage9.yml
index 88f9be15..64bf56a9 100644
--- a/.github/workflows/appimage9.yml
+++ b/.github/workflows/appimage9.yml
@@ -17,7 +17,7 @@ jobs:
       contents: write # action-gh-release
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 149 # enough to cover between tags
           #fetch-tags: true # this should work see actions/checkout~issue#1471
@@ -154,7 +154,7 @@ jobs:
 
       - name: Upload Release Asset
         if: ${{ env.MY_GITHUB_TAG != '' }} # if: ${{ github.ref_type == 'tag' }}
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           body_path: ${{ github.workspace }}/appimage/9/RELEASE-NOTES-GH.txt
           files: |
@@ -163,7 +163,7 @@ jobs:
 
       - name: Upload Artifact
         #if: ${{ env.MY_GITHUB_TAG == '' }} # commented out to always upload
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ${{env.MAGIC_APPIMAGE_OUTPUT_FILENAME}}
           path: |
diff --git a/.github/workflows/main-aarch64.yml b/.github/workflows/main-aarch64.yml
index aaa2230a..7100dd25 100644
--- a/.github/workflows/main-aarch64.yml
+++ b/.github/workflows/main-aarch64.yml
@@ -11,7 +11,7 @@ jobs:
   simple_build_linux_arm:
     runs-on: ubuntu-24.04-arm
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Get Dependencies
         run: |
           sudo apt-get update
diff --git a/.github/workflows/main-macos.yml b/.github/workflows/main-macos.yml
index 31ad1a76..ece62540 100644
--- a/.github/workflows/main-macos.yml
+++ b/.github/workflows/main-macos.yml
@@ -15,7 +15,7 @@ jobs:
     timeout-minutes: 45 # x86_64 seems non-SSD based (slower)
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Get Dependencies
         shell: bash # default shell has unwanted broken pipe indication
@@ -236,7 +236,7 @@ jobs:
           cp *.LOG dist/BUILD-INFO/
 
       - name: Upload archive magic-macos15
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: magic-macos15
           path: |
@@ -247,7 +247,7 @@ jobs:
     timeout-minutes: 30 # arm64 seems SSD based (faster)
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Get Dependencies
         shell: bash # default shell has unwanted broken pipe indication
@@ -468,7 +468,7 @@ jobs:
           cp *.LOG dist/BUILD-INFO/
 
       - name: Upload archive magic-macos
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: magic-macos
           path: |
diff --git a/.github/workflows/main-wasm.yml b/.github/workflows/main-wasm.yml
index fb56fd53..11859193 100644
--- a/.github/workflows/main-wasm.yml
+++ b/.github/workflows/main-wasm.yml
@@ -50,7 +50,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 2
 
@@ -210,7 +210,7 @@ jobs:
         run: ./npm/pack.sh
 
       - name: Upload tarball as artifact
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v7
         with:
           name: magic-vlsi-wasm-npm
           path: npm/*.tgz
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index c8e3d2e7..bd8a36cf 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -9,7 +9,7 @@ jobs:
   simple_build_linux:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - name: Get Dependencies
         run: |
           sudo apt-get update