diff --git a/.github/actions/cache-rust-build/action.yml b/.github/actions/cache-rust-build/action.yml
index ed10fb98..599d3e82 100644
--- a/.github/actions/cache-rust-build/action.yml
+++ b/.github/actions/cache-rust-build/action.yml
@@ -4,7 +4,7 @@ runs:
   using: "composite"
   steps:
     - name: Cache
-      uses: actions/cache@v4
+      uses: actions/cache@v5
       with:
         path: |
           ~/.cargo/registry
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 09c45f82..c05e5d1c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -15,7 +15,7 @@ jobs:
     name: Rustfmt
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: dtolnay/rust-toolchain@stable
         with:
           toolchain: nightly
@@ -27,14 +27,14 @@ jobs:
   detect-unused-dependencies:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Machete
         uses: bnjbvr/cargo-machete@main
   build_and_test-linux:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Install Rust 1.89
         uses: dtolnay/rust-toolchain@1.89.0
         with:
@@ -60,7 +60,7 @@ jobs:
     runs-on: windows-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Install Rust 1.89
         uses: dtolnay/rust-toolchain@1.89.0
         with:
@@ -73,7 +73,7 @@ jobs:
     runs-on: macos-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Install Rust 1.89
         uses: dtolnay/rust-toolchain@1.89.0
         with:
@@ -91,7 +91,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Install Rust nightly
         uses: dtolnay/rust-toolchain@nightly
         with:
diff --git a/.github/workflows/git-xet-release.yml b/.github/workflows/git-xet-release.yml
index 6f1da57d..fc9b77ff 100644
--- a/.github/workflows/git-xet-release.yml
+++ b/.github/workflows/git-xet-release.yml
@@ -26,7 +26,7 @@ jobs:
           - runner: ubuntu-22.04-arm
             target: aarch64
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Install Rust 1.89
         uses: dtolnay/rust-toolchain@1.89.0
       - uses: ./.github/actions/cache-rust-build
@@ -34,7 +34,7 @@ jobs:
         run: |
           cargo build --release
       - name: Upload binary
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: git-xet-linux-${{ matrix.platform.target }}
           path: target/release/git-xet
@@ -49,7 +49,7 @@ jobs:
           - runner: macos-15
             target: aarch64
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Install Rust 1.89
         uses: dtolnay/rust-toolchain@1.89.0
       - uses: ./.github/actions/cache-rust-build
@@ -71,7 +71,7 @@ jobs:
           apple-product-id: co.huggingface.gitxet
           options: --options runtime --entitlements dist/entitlements.xml
       - name: Upload binary
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: git-xet-macos-${{ matrix.platform.target }}
           path: dist/git-xet
@@ -84,7 +84,7 @@ jobs:
           - runner: windows-latest
             target: x86_64
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Install Rust 1.89
         uses: dtolnay/rust-toolchain@1.89.0
       - uses: ./.github/actions/cache-rust-build
@@ -116,12 +116,12 @@ jobs:
           azure_client_id: ${{ secrets.AZURE_CLIENT_ID }}
           azure_client_secret: ${{ secrets.AZURE_CLIENT_SECRET }}
       - name: Upload binary
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: git-xet-windows-${{ matrix.platform.target }}
           path: dist/git-xet.exe
       - name: Upload installer
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: git-xet-windows-installer-${{ matrix.platform.target }}
           path: dist/bin/git-xet-windows-installer.msi
@@ -134,8 +134,8 @@ jobs:
     if: ${{ github.event_name == 'workflow_dispatch' }}
     needs: [linux, windows, macos]
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/download-artifact@v5
+      - uses: actions/checkout@v6
+      - uses: actions/download-artifact@v7
         with:
           path: dist
       - name: Create GitHub Release
diff --git a/.github/workflows/hf-xet-tests.yml b/.github/workflows/hf-xet-tests.yml
index 0b15d3ea..699ca0e0 100644
--- a/.github/workflows/hf-xet-tests.yml
+++ b/.github/workflows/hf-xet-tests.yml
@@ -17,13 +17,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # checkout out xet-core
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       # checkout out huggingface_hub
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           repository: huggingface/huggingface_hub
           path: huggingface_hub
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: '3.10'
       - name: Create venv
diff --git a/.github/workflows/pre-release-testing.yml b/.github/workflows/pre-release-testing.yml
index 53616d68..3a4b55eb 100644
--- a/.github/workflows/pre-release-testing.yml
+++ b/.github/workflows/pre-release-testing.yml
@@ -34,7 +34,7 @@ jobs:
           echo "BRANCH_NAME=ci_test_hf_xet_${TRIMMED_VERSION}_release" >> $GITHUB_OUTPUT
 
       - name: Checkout target repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           repository: huggingface/${{ matrix.target-repo }}
           path: ${{ matrix.target-repo }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d551cedb..aa2f879c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -37,8 +37,8 @@ jobs:
           - 3.13t
           - 3.14t
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
           cache: 'pip'
@@ -107,12 +107,12 @@ jobs:
           cp hf_xet/dist/* dist/
       - name: Upload debug symbols
         if: env.IS_RELEASE == 'true'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: dbg-linux-${{ matrix.python-version }}-${{ matrix.platform.target }}
           path: hf_xet/dbg
       - name: Upload wheels
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: wheels-linux-${{ matrix.python-version }}-${{ matrix.platform.target }}
           path: dist
@@ -131,8 +131,8 @@ jobs:
           - 3.13t
           - 3.14t
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
           cache: 'pip'
@@ -193,12 +193,12 @@ jobs:
           cp hf_xet/dist/* dist/
       - name: Upload debug symbols
         if: env.IS_RELEASE == 'true'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: dbg-musllinux-${{ matrix.python-version }}-${{ matrix.platform.target }}
           path: hf_xet/dbg
       - name: Upload wheels with separated debug symbols
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: wheels-musllinux-${{ matrix.python-version }}-${{ matrix.platform.target }}
           path: dist
@@ -216,8 +216,8 @@ jobs:
           - 3.13t
           - 3.14t
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
           cache: 'pip'
@@ -248,12 +248,12 @@ jobs:
           mkdir hf_xet/dbg
           cp hf_xet/target/${{ matrix.platform.rust_target }}/release/hf_xet.pdb hf_xet/dbg/${SYMBOL_FILE}
       - name: Upload debug symbols
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: dbg-windows-${{ matrix.python-version }}-${{ matrix.platform.target }}
           path: hf_xet/dbg
       - name: Upload wheels
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: wheels-windows-${{ matrix.python-version }}-${{ matrix.platform.target }}
           path: hf_xet/dist
@@ -274,8 +274,8 @@ jobs:
           - 3.13t
           - 3.14t
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
           cache: 'pip'
@@ -319,12 +319,12 @@ jobs:
           cp -r libhf_xet.dylib.dSYM ../../../dbg/${SYMBOL_FILE}
       - name: Upload debug symbols
         if: env.IS_RELEASE == 'true'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: dbg-macos-${{ matrix.python-version }}-${{ matrix.platform.target }}
           path: hf_xet/dbg
       - name: Upload wheels
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: wheels-macos-${{ matrix.python-version }}-${{ matrix.platform.target }}
           path: hf_xet/dist
@@ -332,7 +332,7 @@ jobs:
   sdist:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Update version in toml
         run: |
           TAG=${{ github.event.inputs.tag }}
@@ -358,7 +358,7 @@ jobs:
           tar -cvzf ${DISTFILE} ${DISTNAME}
           rm -rf ${DISTNAME} 
       - name: Upload sdist
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: wheels-sdist
           path: hf_xet/dist
@@ -377,7 +377,7 @@ jobs:
       attestations: write
     environment: release
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v7
       - name: Generate artifact attestation
         uses: actions/attest-build-provenance@v1
         with:
@@ -396,8 +396,8 @@ jobs:
     if: ${{ github.event_name == 'workflow_dispatch' }}
     needs: [ linux, musllinux, windows, macos, sdist ]
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/download-artifact@v4
+      - uses: actions/checkout@v6
+      - uses: actions/download-artifact@v7
       - name: Create GitHub Release
         env: 
           GH_TOKEN: ${{ github.token }}