diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a8c56cc..3dd6583 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -39,7 +39,7 @@ jobs:
               node -e "const s=require('./$f').total;console.log('| $pkg | '+['statements','branches','functions','lines'].map(k=>s[k].pct+'%').join(' | ')+' |')"
             done
           } >> "$GITHUB_STEP_SUMMARY"
-      - uses: actions/upload-artifact@v5
+      - uses: actions/upload-artifact@v7
         if: always()
         with:
           name: coverage
@@ -58,7 +58,7 @@ jobs:
         with:
           node-version-file: .nvmrc
           cache: pnpm
-      - uses: supabase/setup-cli@v1
+      - uses: supabase/setup-cli@v3
         with:
           version: 3.0.0
       - run: pnpm install --frozen-lockfile
@@ -78,7 +78,7 @@ jobs:
         with:
           node-version-file: .nvmrc
           cache: pnpm
-      - uses: supabase/setup-cli@v1
+      - uses: supabase/setup-cli@v3
         with:
           version: 3.0.0
       - run: pnpm install --frozen-lockfile
@@ -107,7 +107,7 @@ jobs:
       - name: Realtime log
         if: failure()
         run: docker logs supabase_realtime_potluck 2>&1 | tail -n 400
-      - uses: actions/upload-artifact@v5
+      - uses: actions/upload-artifact@v7
         if: failure()
         with:
           name: playwright-report
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 7441160..5a69e72 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -41,7 +41,7 @@ jobs:
         with:
           # The commit CI just tested, not whatever main points at now.
           ref: ${{ github.event.workflow_run.head_sha || github.sha }}
-      - uses: supabase/setup-cli@v1
+      - uses: supabase/setup-cli@v3
         with:
           version: 3.0.0
       - name: Push migrations and auth config
@@ -91,7 +91,7 @@ jobs:
           VITE_DOCS_URL: ${{ vars.VITE_DOCS_URL }}
       - name: Deploy production
         if: env.HAS_CLOUDFLARE == 'true' && github.event_name != 'pull_request'
-        uses: cloudflare/wrangler-action@v3
+        uses: cloudflare/wrangler-action@v4
         with:
           apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           accountId: ${{ vars.CLOUDFLARE_ACCOUNT_ID }}
@@ -100,7 +100,7 @@ jobs:
       - name: Upload preview
         id: preview
         if: env.HAS_CLOUDFLARE == 'true' && github.event_name == 'pull_request'
-        uses: cloudflare/wrangler-action@v3
+        uses: cloudflare/wrangler-action@v4
         with:
           apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           accountId: ${{ vars.CLOUDFLARE_ACCOUNT_ID }}