diff --git a/.github/workflows/api_refs.yaml b/.github/workflows/api_refs.yaml
index cc51f8b54a..0b3c85c28c 100644
--- a/.github/workflows/api_refs.yaml
+++ b/.github/workflows/api_refs.yaml
@@ -34,7 +34,7 @@ on:
 jobs:
     open_php_api_ref_pr:
         name: "PHP & REST API References' PR"
-        runs-on: ubuntu-latest
+        runs-on: ubuntu-26.04
 
         steps:
             - name: Set version and branches
@@ -77,7 +77,7 @@ jobs:
                   echo "virtual_dxp_version=${virtual_dxp_version}" >> "$GITHUB_OUTPUT"
 
             - name: Checkout documentation
-              uses: actions/checkout@v4
+              uses: actions/checkout@v7
               with:
                   ref: ${{ steps.version_and_branches.outputs.base_branch }}
 
@@ -96,14 +96,14 @@ jobs:
                   coverage: none
 
             - name: Set up node
-              uses: actions/setup-node@v4
+              uses: actions/setup-node@v7
             - name: Install Redocly CLI
               run: npm install -g @redocly/cli@latest
 
             - name: Generate token
               id: generate_token
               if: inputs.use_dev_version == true
-              uses: actions/create-github-app-token@v2
+              uses: actions/create-github-app-token@v3
               with:
                   app-id: ${{ secrets.AUTOMATION_CLIENT_ID }}
                   private-key: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
@@ -158,7 +158,7 @@ jobs:
                   fi
 
             - name: Create Pull Request
-              uses: peter-evans/create-pull-request@v7
+              uses: peter-evans/create-pull-request@v8
               with:
                   token: ${{ secrets.EZROBOT_PAT }}
                   title: "API Refs ${{ steps.version_and_branches.outputs.version }}"
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index beab4188ca..ebd78ea3b9 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -14,20 +14,26 @@ jobs:
             # added or changed files to the repository.
             contents: write
 
-        runs-on: ubuntu-latest
+        runs-on: ubuntu-26.04
         strategy:
             matrix:
                 python-version: [3.13]
 
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@v7
 
             - name: Set up Python ${{ matrix.python-version }}
-              uses: actions/setup-python@v3
+              uses: actions/setup-python@v7
               with:
                   python-version: ${{ matrix.python-version }}
 
-            - uses: "ramsey/composer-install@v3"
+            - name: Setup PHP
+              uses: shivammathur/setup-php@v2
+              with:
+                  php-version: "8.3"
+                  coverage: none
+
+            - uses: "ramsey/composer-install@v4"
               with:
                   working-directory: "tools/php-cs-fixer"
                   dependency-versions: highest
@@ -43,7 +49,7 @@ jobs:
                     rm yarn.lock
 
             - name: Commit changes
-              uses: stefanzweifel/git-auto-commit-action@v4
+              uses: stefanzweifel/git-auto-commit-action@v7
               with:
                   commit_message: PHP & JS CS Fixes
 
@@ -66,13 +72,13 @@ jobs:
                     fi
 
     python-tests:
-        runs-on: ubuntu-latest
+        runs-on: ubuntu-26.04
 
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@v7
 
             - name: Set up Python
-              uses: actions/setup-python@v3
+              uses: actions/setup-python@v7
               with:
                   python-version: "3.13"
 
@@ -85,23 +91,23 @@ jobs:
               run: pytest
 
     markdownlint:
-        runs-on: ubuntu-latest
+        runs-on: ubuntu-26.04
         if: github.event_name == 'pull_request'
 
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@v7
 
             - name: Run markdownlint
-              uses: DavidAnson/markdownlint-cli2-action@v20
+              uses: DavidAnson/markdownlint-cli2-action@v24
               with:
                   globs: "docs/**/*.md"
 
     vale-check:
-        runs-on: ubuntu-latest
+        runs-on: ubuntu-26.04
         if: github.event_name == 'pull_request'
 
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@v7
 
             - name: Get Vale.sh configs
               env:
@@ -114,7 +120,7 @@ jobs:
                   mv vale/vale-styles-main/* vale/vale-styles-main/.vale.ini .
 
             - name: Run Vale.sh
-              uses: vale-cli/vale-action@v2
+              uses: vale-cli/vale-action@v3
               with:
                   reporter: github-check
                   filter_mode: added
diff --git a/.github/workflows/code_samples.yaml b/.github/workflows/code_samples.yaml
index 2b26f80d28..8dd6e35695 100644
--- a/.github/workflows/code_samples.yaml
+++ b/.github/workflows/code_samples.yaml
@@ -6,7 +6,7 @@ on:
 jobs:
     code-samples-validation:
         name: Validate code samples
-        runs-on: "ubuntu-22.04"
+        runs-on: "ubuntu-26.04"
         strategy:
             fail-fast: false
             matrix:
@@ -14,7 +14,7 @@ jobs:
                     - "8.4" # Upper supported version
                     - "8.3" # Lower supported version
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@v7
 
             - name: Setup PHP Action
               uses: shivammathur/setup-php@v2
@@ -26,7 +26,7 @@ jobs:
 
             - name: Generate token
               id: generate_token
-              uses: actions/create-github-app-token@v2
+              uses: actions/create-github-app-token@v3
               with:
                   app-id: ${{ secrets.AUTOMATION_CLIENT_ID }}
                   private-key: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
@@ -41,7 +41,7 @@ jobs:
                   SATIS_NETWORK_TOKEN: ${{ secrets.SATIS_NETWORK_TOKEN }}
                   GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}
 
-            - uses: ramsey/composer-install@v3
+            - uses: ramsey/composer-install@v4
               with:
                   dependency-versions: highest
 
@@ -54,7 +54,7 @@ jobs:
 
     code-samples-inclusion-check:
         name: Check code samples inclusion
-        runs-on: ubuntu-latest
+        runs-on: ubuntu-26.04
         if: github.event_name == 'pull_request'
         permissions:
             # Needed to manage the comment
@@ -72,7 +72,7 @@ jobs:
 
             -   name: Checkout target branch (base_ref)
                 if: steps.list.outputs.CODE_SAMPLES_CHANGE != ''
-                uses: actions/checkout@v3
+                uses: actions/checkout@v7
                 with:
                     ref: ${{ github.base_ref }}
             -   name: Log target branch code_samples usage
@@ -87,7 +87,7 @@ jobs:
 
             -   name: Checkout source branch (head_ref)
                 if: steps.list.outputs.CODE_SAMPLES_CHANGE != ''
-                uses: actions/checkout@v3
+                uses: actions/checkout@v7
                 with:
                     ref: ${{ github.head_ref }}
             -   name: Log source branch code_samples usage
@@ -117,7 +117,7 @@ jobs:
             -   name: Upload code_samples usages differences artifact
                 id: artifact
                 if: steps.list.outputs.CODE_SAMPLES_CHANGE != '' && steps.diff.outputs.CODE_SAMPLES_DIFF != '0'
-                uses: actions/upload-artifact@v4
+                uses: actions/upload-artifact@v7
                 with:
                     name: code_samples_usage.diff.html
                     path: ~/code_samples_usage.diff.html
@@ -140,14 +140,14 @@ jobs:
                     fi
             -   name: Find Comment
                 id: find-comment
-                uses: peter-evans/find-comment@v3
+                uses: peter-evans/find-comment@v4
                 with:
                     issue-number: ${{ github.event.pull_request.number }}
                     comment-author: 'github-actions[bot]'
                     body-includes: 'code_samples/ change report'
             -   name: Delete comment
                 if: steps.find-comment.outputs.comment-id != ''
-                uses: actions/github-script@v6
+                uses: actions/github-script@v9
                 with:
                     script: |
                         github.rest.issues.deleteComment({
@@ -157,7 +157,7 @@ jobs:
                         })
             -   name: Create comment
                 if: steps.list.outputs.CODE_SAMPLES_CHANGE != '' && steps.diff.outputs.CODE_SAMPLES_DIFF != '0'
-                uses: peter-evans/create-or-update-comment@v4
+                uses: peter-evans/create-or-update-comment@v5
                 with:
                     issue-number: ${{ github.event.pull_request.number }}
                     body-path: code_samples_usage.diff.md
diff --git a/.github/workflows/link_check.yaml b/.github/workflows/link_check.yaml
index 582669ca32..03adae8022 100644
--- a/.github/workflows/link_check.yaml
+++ b/.github/workflows/link_check.yaml
@@ -37,17 +37,17 @@ on:
 
 jobs:
     link-check:
-        runs-on: ubuntu-latest
+        runs-on: ubuntu-26.04
         strategy:
             matrix:
                 python-version: [3.13]
 
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@v7
 
             - name: Generate token
               id: generate_token
-              uses: actions/create-github-app-token@v2
+              uses: actions/create-github-app-token@v3
               with:
                   app-id: ${{ secrets.AUTOMATION_CLIENT_ID }}
                   private-key: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
@@ -59,7 +59,7 @@ jobs:
                       "https://github.com/ibexa/documentation-connect"
 
             - name: Set up Python ${{ matrix.python-version }}
-              uses: actions/setup-python@v5
+              uses: actions/setup-python@v7
               with:
                   python-version: ${{ matrix.python-version }}
 
@@ -82,7 +82,7 @@ jobs:
 
             - name: Restore lychee cache
               if: ${{ !inputs.force_recheck }}
-              uses: actions/cache@v4
+              uses: actions/cache@v6
               with:
                   path: .lycheecache
                   key: lychee-${{ github.ref_name }}-${{ github.sha }}
@@ -106,6 +106,6 @@ jobs:
 
             - name: Comment broken links
               if: always() && github.event_name == 'pull_request'
-              uses: marocchino/sticky-pull-request-comment@v2
+              uses: marocchino/sticky-pull-request-comment@v3
               with:
                 path: lychee-report.md
diff --git a/.github/workflows/preview_comment.yaml b/.github/workflows/preview_comment.yaml
index 3c204bec6c..43f2bd9c0c 100644
--- a/.github/workflows/preview_comment.yaml
+++ b/.github/workflows/preview_comment.yaml
@@ -13,7 +13,7 @@ on:
 jobs:
     post-preview-links:
         name: 'Post preview links for changed files'
-        runs-on: ubuntu-latest
+        runs-on: ubuntu-26.04
         permissions:
             # Needed to manage the comment
             pull-requests: write
@@ -21,7 +21,7 @@ jobs:
             contents: read
 
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@v7
 
             -   name: Fetch base branch for comparison
                 run: git fetch origin ${{ github.base_ref }} --depth=1
@@ -66,14 +66,14 @@ jobs:
 
             -   name: Find comment
                 id: find-comment
-                uses: peter-evans/find-comment@v3
+                uses: peter-evans/find-comment@v4
                 with:
                     issue-number: ${{ github.event.pull_request.number }}
                     comment-author: 'github-actions[bot]'
                     body-includes: 'Preview of modified files'
 
             -   name: Create or update comment
-                uses: peter-evans/create-or-update-comment@v4
+                uses: peter-evans/create-or-update-comment@v5
                 with:
                     comment-id: ${{ steps.find-comment.outputs.comment-id }}
                     issue-number: ${{ github.event.pull_request.number }}
diff --git a/.github/workflows/release_composer_package.yaml b/.github/workflows/release_composer_package.yaml
index 64d2c42722..269ae4a065 100644
--- a/.github/workflows/release_composer_package.yaml
+++ b/.github/workflows/release_composer_package.yaml
@@ -24,7 +24,7 @@ on:
 
 jobs:
     determine-branches:
-        runs-on: ubuntu-latest
+        runs-on: ubuntu-26.04
         outputs:
             branches: ${{ steps.set.outputs.branches }}
             devdoc_branch: ${{ steps.set.outputs.devdoc_branch }}
@@ -54,7 +54,7 @@ jobs:
 
     release:
         needs: determine-branches
-        runs-on: ubuntu-latest
+        runs-on: ubuntu-26.04
         permissions:
             # Needed to commit the generated Markdown and push a tag.
             contents: write
@@ -68,7 +68,7 @@ jobs:
             # pushed to the branch itself (see below), only tagged, so the diff target is
             # the latest tag — fetched individually in "Find the last tag" instead of
             # pulling the full history + every daily tag snapshot (which took minutes).
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@v7
               with:
                   ref: ${{ needs.determine-branches.outputs.devdoc_branch || matrix.branch }}
 
@@ -80,7 +80,7 @@ jobs:
                   path: user-docs
 
             - name: Set up Python
-              uses: actions/setup-python@v3
+              uses: actions/setup-python@v7
               with:
                   python-version: "3.13"
 
@@ -101,7 +101,7 @@ jobs:
 
             - name: Generate token
               id: generate_token
-              uses: actions/create-github-app-token@v2
+              uses: actions/create-github-app-token@v3
               with:
                   app-id: ${{ secrets.AUTOMATION_CLIENT_ID }}
                   private-key: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
@@ -118,7 +118,7 @@ jobs:
 
             # Needed to resolve the PHP API classes referenced by the docs to
             # their vendor/ source paths (dump_class_paths.php).
-            - uses: ramsey/composer-install@a8d0d959dab41457692a5e2041bd9b757a119e3f #v3.2.1
+            - uses: ramsey/composer-install@65e4f84970763564f46a70b8a54b90d033b3bdda #4.0.0
               with:
                   dependency-versions: highest