diff --git a/.github/workflows/cargo-build.yml b/.github/workflows/cargo-build.yml
index 9a49f6e..209a708 100644
--- a/.github/workflows/cargo-build.yml
+++ b/.github/workflows/cargo-build.yml
@@ -31,7 +31,7 @@ jobs:
       # Remove this when it no longer FTBFS on `ring` in CI.
       CARGO_PROFILE_TEST_BUILD_OVERRIDE_DEBUG: true
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: actions-rust-lang/setup-rust-toolchain@v1
       - name: Install dependencies
         run: |
diff --git a/.github/workflows/cargo-clippy.yml b/.github/workflows/cargo-clippy.yml
index a3fe8d6..23dd678 100644
--- a/.github/workflows/cargo-clippy.yml
+++ b/.github/workflows/cargo-clippy.yml
@@ -30,7 +30,7 @@ jobs:
       # Remove this when it no longer FTBFS on `ring` in CI.
       CARGO_PROFILE_TEST_BUILD_OVERRIDE_DEBUG: true
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: actions-rust-lang/setup-rust-toolchain@v1
         with:
           components: clippy
diff --git a/.github/workflows/cargo-fmt.yml b/.github/workflows/cargo-fmt.yml
index 45de4bc..9cd8618 100644
--- a/.github/workflows/cargo-fmt.yml
+++ b/.github/workflows/cargo-fmt.yml
@@ -31,7 +31,7 @@ jobs:
       # Remove this when it no longer FTBFS on `ring` in CI.
       CARGO_PROFILE_TEST_BUILD_OVERRIDE_DEBUG: true
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: actions-rust-lang/setup-rust-toolchain@v1
         with:
           components: rustfmt
diff --git a/.github/workflows/cargo-test.yml b/.github/workflows/cargo-test.yml
index 01c17fa..8145412 100644
--- a/.github/workflows/cargo-test.yml
+++ b/.github/workflows/cargo-test.yml
@@ -28,7 +28,7 @@ jobs:
       # Remove this when it no longer FTBFS on `ring` in CI.
       CARGO_PROFILE_TEST_BUILD_OVERRIDE_DEBUG: true
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: actions-rust-lang/setup-rust-toolchain@v1
       - uses: taiki-e/install-action@cargo-llvm-cov
       - uses: taiki-e/install-action@nextest
diff --git a/.github/workflows/make-release.yml b/.github/workflows/make-release.yml
index e969714..407689c 100644
--- a/.github/workflows/make-release.yml
+++ b/.github/workflows/make-release.yml
@@ -13,13 +13,13 @@ jobs:
     name: make release
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: 'Authenticate to Google Cloud'
-        uses: 'google-github-actions/auth@v2.1.7'
+        uses: 'google-github-actions/auth@v3.0.0'
         with:
           credentials_json: '${{ secrets.GOOGLE_CLOUD_DL_SA }}'
       - name: Set up Cloud SDK
-        uses: google-github-actions/setup-gcloud@v2.1.2
+        uses: google-github-actions/setup-gcloud@v3.0.1
         with:
           project_id: zooapi
       - name: Install latest nightly
@@ -41,17 +41,17 @@ jobs:
 
           cargo install toml-cli
       - name: Cache cargo registry
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.cargo/registry
           key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}
       - name: Cache cargo index
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.cargo/git
           key: ${{ runner.os }}-cargo-index-${{ hashFiles('**/Cargo.lock') }}
       - name: Cache cargo build
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: target
           key: ${{ runner.os }}-cargo-build-target-${{ hashFiles('**/Cargo.lock') }}
@@ -70,19 +70,19 @@ jobs:
           cp cross/README.md cross/${{matrix.os}}-${{github.ref_name}}-README.md
       - name: 'upload binary files'
         id: upload-files
-        uses: google-github-actions/upload-cloud-storage@v2.2.1
+        uses: google-github-actions/upload-cloud-storage@v3.0.0
         with:
           path: releases
           destination: dl.kittycad.io
       # Store the binary artifacts for retrival later.
       - name: Upload artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: release-${{ matrix.os }}-${{github.ref_name}}
           path: ./cross
       # Store the readme as an artifact so we can combine the two.
       - name: Archive the README.md data
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: ${{matrix.os}}-${{github.ref_name}}-README.md
           path: ${{github.workspace}}/cross/${{matrix.os}}-${{github.ref_name}}-README.md
@@ -91,21 +91,21 @@ jobs:
     needs: [makerelease]
     name: createrelease
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Install latest nightly
         uses: dtolnay/rust-toolchain@stable
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v7
         with:
           name:  release-macos-latest-${{github.ref_name}}
           path: build
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v7
         with:
           name:  release-ubuntu-latest-${{github.ref_name}}
           path: build
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v7
         with:
           name:  ubuntu-latest-${{github.ref_name}}-README.md
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v7
         with:
           name:  macos-latest-${{github.ref_name}}-README.md
       - name: combine readmes
diff --git a/.github/workflows/update-spec-for-repos.yml b/.github/workflows/update-spec-for-repos.yml
index af60909..91f1ee0 100644
--- a/.github/workflows/update-spec-for-repos.yml
+++ b/.github/workflows/update-spec-for-repos.yml
@@ -19,16 +19,16 @@ jobs:
         repo: [modeling-app]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/create-github-app-token@v1
+      - uses: actions/create-github-app-token@v2
         id: app-token
         with:
           # required
           app-id: ${{ secrets.GH_ORG_APP_ID }}
           private-key: ${{ secrets.GH_ORG_APP_PRIVATE_KEY }}
           owner: ${{ github.repository_owner }}
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       # Checkout the repo since we will want to update the file there.
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           repository: 'kittycad/${{ matrix.repo }}'
           path: ${{ matrix.repo }}
diff --git a/.github/workflows/validate-openapi-spec.yml b/.github/workflows/validate-openapi-spec.yml
index 70a0e27..57d536f 100644
--- a/.github/workflows/validate-openapi-spec.yml
+++ b/.github/workflows/validate-openapi-spec.yml
@@ -16,8 +16,8 @@ jobs:
   format:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4.1.0
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6.1.0
         with:
           node-version: '18'
       - name: Install our tools