diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index f2ce05d0..0e599a11 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -38,16 +38,16 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     - name: Install Go
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@v6
       with:
         go-version-file: go.mod
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@v4
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -62,7 +62,7 @@ jobs:
         swag init --pd -d . -g ./cmd/dashboard/main.go -o ./cmd/dashboard/docs --requiredByDefault
 
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v3
+      uses: github/codeql-action/autobuild@v4
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 https://git.io/JvXDl
@@ -76,4 +76,4 @@ jobs:
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@v4
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ab166ad5..7b340571 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -33,7 +33,7 @@ jobs:
 
       - run: git config --global --add safe.directory /__w/nezha/nezha
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Prepare frontends' dists
         run: |
@@ -47,7 +47,7 @@ jobs:
           wget -qO pkg/geoip/geoip.db https://ipinfo.io/data/free/country.mmdb?token=${IPINFO_TOKEN}
 
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version: "1.26.x"
 
@@ -60,7 +60,7 @@ jobs:
       - name: Cache zstd for s390x
         if: matrix.goarch == 's390x'
         id: cache-zstd
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: /tmp/zstd-s390x
           key: zstd-s390x-v1.5.7
@@ -96,7 +96,7 @@ jobs:
 
       - name: Build with tag
         if: contains(github.ref, 'refs/tags/')
-        uses: goreleaser/goreleaser-action@v6
+        uses: goreleaser/goreleaser-action@v7
         env:
           GOOS: ${{ matrix.goos }}
           GOARCH: ${{ matrix.goarch }}
@@ -108,7 +108,7 @@ jobs:
 
       - name: Build snapshot
         if: contains(github.ref, 'refs/tags/') == false
-        uses: goreleaser/goreleaser-action@v6
+        uses: goreleaser/goreleaser-action@v7
         env:
           GOOS: ${{ matrix.goos }}
           GOARCH: ${{ matrix.goarch }}
@@ -119,7 +119,7 @@ jobs:
           args: build --single-target --clean --skip=validate --snapshot
 
       - name: Upload artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: dashboard-${{ matrix.goos }}-${{ matrix.goarch }}
           path: |
@@ -132,7 +132,7 @@ jobs:
     name: Release
     steps:
       - name: Download artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           path: ./assets
 
@@ -146,7 +146,7 @@ jobs:
           done
 
       - name: Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           files: "assets/*/*/*.zip"
           generate_release_notes: true
@@ -178,10 +178,10 @@ jobs:
     needs: build
     name: Release Docker images
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Download artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           path: ./assets
 
@@ -217,10 +217,10 @@ jobs:
           password: ${{ secrets.ALI_PAT }}
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Set up image name
         run: |
@@ -235,7 +235,7 @@ jobs:
 
       - name: Build dasbboard image And Push with tag
         if: contains(github.ref, 'refs/tags/')
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: ./Dockerfile
@@ -249,7 +249,7 @@ jobs:
 
       - name: Build dasbboard image And Push snapshot
         if: contains(github.ref, 'refs/tags/') == false
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: ./Dockerfile
diff --git a/.github/workflows/sync-code-atomgit.yml b/.github/workflows/sync-code-atomgit.yml
index 10982ecc..ffc40d68 100644
--- a/.github/workflows/sync-code-atomgit.yml
+++ b/.github/workflows/sync-code-atomgit.yml
@@ -8,7 +8,7 @@ jobs:
   sync-code-to-atomgit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: adambirds/sync-github-to-gitlab-action@v1.1.0
         with:
           destination_repository: git@atomgit.com:naiba/nezha-dashboard.git
diff --git a/.github/workflows/sync-code.yml b/.github/workflows/sync-code.yml
index a6dad776..718ee41d 100644
--- a/.github/workflows/sync-code.yml
+++ b/.github/workflows/sync-code.yml
@@ -8,7 +8,7 @@ jobs:
   sync-to-jihulab:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: adambirds/sync-github-to-gitlab-action@v1.1.0
         with:
           destination_repository: git@gitee.com:naibahq/nezha.git
diff --git a/.github/workflows/sync-release-atomgit.yml b/.github/workflows/sync-release-atomgit.yml
index cac88db2..6c58d0a1 100644
--- a/.github/workflows/sync-release-atomgit.yml
+++ b/.github/workflows/sync-release-atomgit.yml
@@ -10,7 +10,7 @@ jobs:
     env:
       ATOMGIT_PAT: ${{ secrets.ATOMGIT_PAT }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Sync to AtomGit
         run: |
           pip3 install PyGitHub
diff --git a/.github/workflows/sync-release.yml b/.github/workflows/sync-release.yml
index 3dc6d1cd..6d5d6b6c 100644
--- a/.github/workflows/sync-release.yml
+++ b/.github/workflows/sync-release.yml
@@ -10,7 +10,7 @@ jobs:
     env:
       GITEE_TOKEN: ${{ secrets.GITEE_TOKEN }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Sync to Gitee
         run: |
           pip3 install PyGitHub
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index f109ee00..74c408cd 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -23,9 +23,9 @@ jobs:
     env:
       GO111MODULE: on
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           go-version: "1.26.x"