diff --git a/.github/workflows/build-electron-apps.yml b/.github/workflows/build-electron-apps.yml
index c022c37..2ce83df 100644
--- a/.github/workflows/build-electron-apps.yml
+++ b/.github/workflows/build-electron-apps.yml
@@ -155,7 +155,7 @@ jobs:
         if: |
           (runner.os == 'Windows' && steps.windows_artifacts.outputs.found == 'true') ||
           (runner.os == 'Linux' && steps.linux_artifacts.outputs.found == 'true')
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: ${{ matrix.app.name }}-${{ steps.platform.outputs.name }}-${{ github.event.pull_request.number || github.sha }}
           path: |
diff --git a/.github/workflows/build_installer.yml b/.github/workflows/build_installer.yml
index e783aad..d418a51 100644
--- a/.github/workflows/build_installer.yml
+++ b/.github/workflows/build_installer.yml
@@ -104,7 +104,7 @@ jobs:
           Write-Host "Installer SHA256: $hash"
 
       - name: Upload Windows installer artifact
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: gaia-windows-installer-${{ steps.extract_version.outputs.VERSION }}-${{ steps.get_commit.outputs.COMMIT_HASH }}
           path: installer\gaia-windows-setup.exe
diff --git a/.github/workflows/local_hybrid_tests.yml b/.github/workflows/local_hybrid_tests.yml
index 44abc61..6b0f878 100644
--- a/.github/workflows/local_hybrid_tests.yml
+++ b/.github/workflows/local_hybrid_tests.yml
@@ -35,7 +35,7 @@ jobs:
     needs: build-installer
     if: github.event_name != 'pull_request' || github.event.pull_request.draft == false || contains(github.event.pull_request.labels.*.name, 'ready_for_ci')
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Remove existing GAIA installation
         shell: powershell
@@ -57,7 +57,7 @@ jobs:
           Write-Host "Expected installer hash: ${{ needs.build-installer.outputs.INSTALLER_HASH }}"
 
       - name: Download GAIA Installer
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
         with:
           name: gaia-windows-installer-${{ needs.build-installer.outputs.VERSION }}-${{ needs.build-installer.outputs.COMMIT_HASH }}
           path: installer
diff --git a/.github/workflows/publish_installer.yml b/.github/workflows/publish_installer.yml
index be42b5a..0fe5777 100644
--- a/.github/workflows/publish_installer.yml
+++ b/.github/workflows/publish_installer.yml
@@ -53,14 +53,14 @@ jobs:
           echo "EOF" >> $env:GITHUB_OUTPUT
 
       - name: Download GAIA Installer
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
         with:
           name: gaia-windows-installer-${{ needs.build-installer.outputs.VERSION }}-${{ needs.build-installer.outputs.COMMIT_HASH }}
           path: release-assets
 
       - name: Download Electron App Artifacts (Windows)
         if: needs.build-electron-apps.outputs.has_apps == 'true'
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
         with:
           pattern: "*-windows-${{ github.sha }}"
           path: release-assets
@@ -69,7 +69,7 @@ jobs:
 
       - name: Download Electron App Artifacts (Linux)
         if: needs.build-electron-apps.outputs.has_apps == 'true'
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
         with:
           pattern: "*-linux-${{ github.sha }}"
           path: release-assets
diff --git a/.github/workflows/test_agent_mcp_server.yml b/.github/workflows/test_agent_mcp_server.yml
index 53e6bd5..18c0184 100644
--- a/.github/workflows/test_agent_mcp_server.yml
+++ b/.github/workflows/test_agent_mcp_server.yml
@@ -94,7 +94,7 @@ jobs:
 
       - name: Upload test results
         if: always()
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: test-results-${{ matrix.os }}
           path: |
diff --git a/.github/workflows/test_api.yml b/.github/workflows/test_api.yml
index d218ddf..2f633e7 100644
--- a/.github/workflows/test_api.yml
+++ b/.github/workflows/test_api.yml
@@ -197,7 +197,7 @@ jobs:
 
       - name: Upload API Server Logs
         if: failure()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: api-server-logs
           path: |
diff --git a/.github/workflows/test_chat_agent.yml b/.github/workflows/test_chat_agent.yml
index 1f13e52..fa5369a 100644
--- a/.github/workflows/test_chat_agent.yml
+++ b/.github/workflows/test_chat_agent.yml
@@ -26,7 +26,7 @@ jobs:
     if: github.event_name != 'pull_request' || github.event.pull_request.draft == false || contains(github.event.pull_request.labels.*.name, 'ready_for_ci')
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Free disk space
         uses: ./.github/actions/free-disk-space
diff --git a/.github/workflows/test_chat_sdk.yml b/.github/workflows/test_chat_sdk.yml
index fb59728..b4e5c1f 100644
--- a/.github/workflows/test_chat_sdk.yml
+++ b/.github/workflows/test_chat_sdk.yml
@@ -33,7 +33,7 @@ jobs:
     runs-on: [stx, miniforge]
     if: github.event_name != 'pull_request' || github.event.pull_request.draft == false || contains(github.event.pull_request.labels.*.name, 'ready_for_ci')
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Download and Install Miniforge
         run: |
diff --git a/.github/workflows/test_electron.yml b/.github/workflows/test_electron.yml
index 5f701bb..42c233a 100644
--- a/.github/workflows/test_electron.yml
+++ b/.github/workflows/test_electron.yml
@@ -48,7 +48,7 @@ jobs:
 
       - name: Upload test coverage
         if: always()
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: electron-framework-coverage
           path: tests/electron/coverage/
@@ -85,7 +85,7 @@ jobs:
 
       - name: Upload test results
         if: always()
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: apps-integration-test-results
           path: tests/electron/coverage/
@@ -122,7 +122,7 @@ jobs:
 
       - name: Upload functional test results
         if: always()
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: apps-functional-test-results
           path: tests/electron/coverage/
@@ -234,7 +234,7 @@ jobs:
 
       - name: Upload audit results
         if: always()
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: audit-${{ matrix.package.name }}
           path: ${{ matrix.package.path }}/audit-results.json
diff --git a/.github/workflows/test_embeddings.yml b/.github/workflows/test_embeddings.yml
index 4753f09..cea4362 100644
--- a/.github/workflows/test_embeddings.yml
+++ b/.github/workflows/test_embeddings.yml
@@ -203,7 +203,7 @@ jobs:
 
     - name: Upload test results
       if: always()
-      uses: actions/upload-artifact@v5
+      uses: actions/upload-artifact@v6
       with:
         name: embedding-test-results
         path: |
diff --git a/.github/workflows/test_gaia_cli_windows.yml b/.github/workflows/test_gaia_cli_windows.yml
index 69f5f7e..392626d 100644
--- a/.github/workflows/test_gaia_cli_windows.yml
+++ b/.github/workflows/test_gaia_cli_windows.yml
@@ -36,7 +36,7 @@ jobs:
     runs-on: [stx, miniforge]
     if: github.event_name != 'pull_request' || github.event.pull_request.draft == false || contains(github.event.pull_request.labels.*.name, 'ready_for_ci')
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Download and Install Miniforge
         run: |
diff --git a/.github/workflows/test_installer.yml b/.github/workflows/test_installer.yml
index d7ef0ad..42e0d32 100644
--- a/.github/workflows/test_installer.yml
+++ b/.github/workflows/test_installer.yml
@@ -36,7 +36,7 @@ jobs:
           Write-Host "Expected installer hash: ${{ needs.build-installer.outputs.INSTALLER_HASH }}"
 
       - name: Download GAIA Installer
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
         with:
           name: gaia-windows-installer-${{ needs.build-installer.outputs.VERSION }}-${{ needs.build-installer.outputs.COMMIT_HASH }}
           path: installer
diff --git a/.github/workflows/test_mcp.yml b/.github/workflows/test_mcp.yml
index 51af2a5..5ddc1cd 100644
--- a/.github/workflows/test_mcp.yml
+++ b/.github/workflows/test_mcp.yml
@@ -203,7 +203,7 @@ jobs:
 
       - name: Upload MCP Bridge Logs
         if: failure()
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: mcp-bridge-logs-linux
           path: mcp_bridge.log
diff --git a/.github/workflows/test_rag.yml b/.github/workflows/test_rag.yml
index 80b216f..c48b6e1 100644
--- a/.github/workflows/test_rag.yml
+++ b/.github/workflows/test_rag.yml
@@ -46,7 +46,7 @@ jobs:
 
     - name: Upload coverage report
       if: always()
-      uses: actions/upload-artifact@v5
+      uses: actions/upload-artifact@v6
       with:
         name: rag-unit-test-coverage
         path: .coverage
@@ -266,7 +266,7 @@ jobs:
 
     - name: Upload test results
       if: always()
-      uses: actions/upload-artifact@v5
+      uses: actions/upload-artifact@v6
       with:
         name: rag-integration-test-results
         path: |