diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f0c4de37..cbdc6fb3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -283,7 +283,7 @@ jobs:
         persist-credentials: false
 
     - name: Set up Rust
-      uses: dtolnay/rust-toolchain@1.88.0
+      uses: dtolnay/rust-toolchain@1.120.0
       with:
         targets: wasm32-unknown-unknown
 
diff --git a/.github/workflows/playground-wasm.yml b/.github/workflows/playground-wasm.yml
index 0fed9f85..4c8d0a53 100644
--- a/.github/workflows/playground-wasm.yml
+++ b/.github/workflows/playground-wasm.yml
@@ -28,7 +28,7 @@ jobs:
         persist-credentials: false
 
     - name: Set up Rust
-      uses: dtolnay/rust-toolchain@1.88.0
+      uses: dtolnay/rust-toolchain@1.120.0
       with:
         targets: wasm32-unknown-unknown
 
@@ -56,7 +56,7 @@ jobs:
         echo "PLAYGROUND_WASM_OUT=$PLAYGROUND_WASM_OUT" >> "$GITHUB_ENV"
 
     - name: Upload generated playground artifacts
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: playground-wasm-generated
         path: ${{ env.PLAYGROUND_WASM_OUT }}
diff --git a/.github/workflows/testnet-smoke.yml b/.github/workflows/testnet-smoke.yml
index 3356c028..cea5818d 100644
--- a/.github/workflows/testnet-smoke.yml
+++ b/.github/workflows/testnet-smoke.yml
@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Testnet-only guard
         # Belt and braces: this workflow pins the SDF Testnet constants in the