diff --git a/.github/workflows/linters.yml b/.github/workflows/linters.yml
index 07902a4d1..9ada73519 100644
--- a/.github/workflows/linters.yml
+++ b/.github/workflows/linters.yml
@@ -11,9 +11,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
 
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
-    - uses: actions/setup-python@v4
+    - uses: actions/setup-python@v6
       with:
         python-version: '3.12'
         cache: 'pip'
diff --git a/.github/workflows/pr_tests.yml b/.github/workflows/pr_tests.yml
index a04f30dec..8321f573f 100644
--- a/.github/workflows/pr_tests.yml
+++ b/.github/workflows/pr_tests.yml
@@ -35,7 +35,7 @@ jobs:
       github.event.action != 'labeled' ||
       github.event.label.name == 'full-test'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           submodules: recursive
 
@@ -48,7 +48,7 @@ jobs:
 
       - name: Cache liblogosdelivery.so
         id: cache-lib
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: vendor/logos-delivery-python-bindings/lib/liblogosdelivery.so
           key: ${{ steps.cache-key.outputs.key }}
@@ -117,7 +117,7 @@ jobs:
           ls -l "$BINDINGS_DIR/lib/liblogosdelivery.so"
 
       - name: Upload library artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: liblogosdelivery
           path: vendor/logos-delivery-python-bindings/lib/liblogosdelivery.so
@@ -132,11 +132,11 @@ jobs:
       github.event_name != 'push' &&
       (github.event.action != 'labeled' || github.event.label.name == 'full-test')
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           submodules: recursive
 
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.12"
           cache: "pip"
@@ -144,7 +144,7 @@ jobs:
       - run: pip install -r requirements.txt
 
       - name: Download liblogosdelivery.so
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
         with:
           name: liblogosdelivery
           path: vendor/logos-delivery-python-bindings/lib/
@@ -221,7 +221,7 @@ jobs:
 
       - name: Test Report
         if: always()
-        uses: dorny/test-reporter@95058abb17504553158e70e2c058fe1fda4392c2
+        uses: dorny/test-reporter@a43b3a5f7366b97d083190328d2c652e1a8b6aa2 # v3.0.0
         with:
           name: Wrapper Test Results
           path: wrapper-results-*.xml
@@ -242,11 +242,11 @@ jobs:
       ADDITIONAL_NODES: "wakuorg/nwaku:latest,wakuorg/nwaku:latest,wakuorg/nwaku:latest"
       RLN_CREDENTIALS: ${{ secrets.RLN_CREDENTIALS }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           submodules: recursive
 
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.12"
           cache: "pip"
@@ -254,7 +254,7 @@ jobs:
       - run: pip install -r requirements.txt
 
       - name: Download liblogosdelivery.so
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
         with:
           name: liblogosdelivery
           path: vendor/logos-delivery-python-bindings/lib/
@@ -273,7 +273,7 @@ jobs:
 
       - name: Test Report
         if: always()
-        uses: dorny/test-reporter@95058abb17504553158e70e2c058fe1fda4392c2
+        uses: dorny/test-reporter@a43b3a5f7366b97d083190328d2c652e1a8b6aa2 # v3.0.0
         with:
           name: Smoke Test Results
           path: smoke-results.xml
diff --git a/.github/workflows/send_api_e2e_PR.yml b/.github/workflows/send_api_e2e_PR.yml
index cc87cff62..2fb9e8ef7 100644
--- a/.github/workflows/send_api_e2e_PR.yml
+++ b/.github/workflows/send_api_e2e_PR.yml
@@ -13,13 +13,13 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 45
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           repository: logos-messaging/logos-messaging-interop-tests
           ref: SMOKE_TEST_2026.06.25
           submodules: recursive
 
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.12"
           cache: "pip"
@@ -29,7 +29,7 @@ jobs:
       # No build step: liblogosdelivery.so is built by logos-delivery's ci.yml
       # (build job) and consumed here as a workflow artifact from the same run.
       - name: Download liblogosdelivery.so
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
         with:
           name: liblogosdelivery
           path: vendor/logos-delivery-python-bindings/lib/
@@ -93,7 +93,7 @@ jobs:
 
       - name: Test Report
         if: always()
-        uses: dorny/test-reporter@95058abb17504553158e70e2c058fe1fda4392c2
+        uses: dorny/test-reporter@a43b3a5f7366b97d083190328d2c652e1a8b6aa2 # v3.0.0
         with:
           name: Send API E2E Test Results
           path: send-api-results-*.xml
diff --git a/.github/workflows/test_PR_image.yml b/.github/workflows/test_PR_image.yml
index 3c503f377..b83c5a0df 100644
--- a/.github/workflows/test_PR_image.yml
+++ b/.github/workflows/test_PR_image.yml
@@ -40,11 +40,11 @@ jobs:
     timeout-minutes: 120
     steps:
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           repository: logos-messaging/logos-messaging-interop-tests
           ref: SMOKE_TEST_2026.06.25
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v6
         with:
 
           python-version: '3.12'
@@ -62,7 +62,7 @@ jobs:
 
       - name: Test Report
         if: always()
-        uses: dorny/test-reporter@95058abb17504553158e70e2c058fe1fda4392c2
+        uses: dorny/test-reporter@a43b3a5f7366b97d083190328d2c652e1a8b6aa2 # v3.0.0
         with:
           name: Pytest JUnit Test Report
           path: pytest_results.xml
diff --git a/.github/workflows/test_common.yml b/.github/workflows/test_common.yml
index 13657dd07..e5466d757 100644
--- a/.github/workflows/test_common.yml
+++ b/.github/workflows/test_common.yml
@@ -82,14 +82,14 @@ jobs:
       jobResult_17: ${{ steps.set_result.outputs.JOB_RESULT_17 }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           submodules: recursive
 
       - name: Remove unwanted software
         uses: ./.github/actions/prune-vm
 
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.12"
           cache: "pip"
@@ -219,7 +219,7 @@ jobs:
 
       - name: Upload allure results
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: allure-results-${{ matrix.shard }}
           path: allure-results-${{ matrix.shard }}
@@ -238,7 +238,7 @@ jobs:
 
     steps:
       - name: Download all allure results
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
         with:
           path: all-results
           merge-multiple: true
@@ -246,7 +246,7 @@ jobs:
       - name: Check out gh-pages history if it exists
         id: checkout_gh_pages
         continue-on-error: true
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: gh-pages
           path: gh-pages
diff --git a/requirements.txt b/requirements.txt
index 38d3758ba..6b88cc5ea 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,5 +1,5 @@
-allure-pytest==2.13.2
-allure-python-commons==2.13.2
+allure-pytest==2.16.0
+allure-python-commons==2.16.0
 attrs==23.1.0
 black==24.3.0
 certifi==2024.7.4