diff --git a/.github/PklProject b/.github/PklProject
index dd649c51..826ee2b8 100644
--- a/.github/PklProject
+++ b/.github/PklProject
@@ -2,9 +2,9 @@ amends "pkl:Project"
 
 dependencies {
   ["pkl.impl.ghactions"] {
-    uri = "package://pkg.pkl-lang.org/pkl-project-commons/pkl.impl.ghactions@1.1.0"
+    uri = "package://pkg.pkl-lang.org/pkl-project-commons/pkl.impl.ghactions@1.1.2"
   }
   ["gha"] {
-    uri = "package://pkg.pkl-lang.org/pkl-pantry/com.github.actions@1.1.0"
+    uri = "package://pkg.pkl-lang.org/pkl-pantry/com.github.actions@1.2.0"
   }
 }
diff --git a/.github/PklProject.deps.json b/.github/PklProject.deps.json
index 6cd3f34f..f27151d0 100644
--- a/.github/PklProject.deps.json
+++ b/.github/PklProject.deps.json
@@ -3,16 +3,16 @@
   "resolvedDependencies": {
     "package://pkg.pkl-lang.org/pkl-pantry/com.github.actions@1": {
       "type": "remote",
-      "uri": "projectpackage://pkg.pkl-lang.org/pkl-pantry/com.github.actions@1.1.0",
+      "uri": "projectpackage://pkg.pkl-lang.org/pkl-pantry/com.github.actions@1.2.0",
       "checksums": {
-        "sha256": "efe5b1f58648baeac651e88107e13ceb58860c8e28ac18098b857445dc0185b7"
+        "sha256": "eac84e03db6815625a0a8f8dfe4597421284ad28f4425dbd72f529b236fea6b9"
       }
     },
     "package://pkg.pkl-lang.org/pkl-project-commons/pkl.impl.ghactions@1": {
       "type": "remote",
-      "uri": "projectpackage://pkg.pkl-lang.org/pkl-project-commons/pkl.impl.ghactions@1.1.0",
+      "uri": "projectpackage://pkg.pkl-lang.org/pkl-project-commons/pkl.impl.ghactions@1.1.2",
       "checksums": {
-        "sha256": "ae9bbd571a427030712d6a914a3fb6b9df91900b00f5042afe705f7b8182b356"
+        "sha256": "00b07bd19ce17d5d16104138d4a4281f82abb84d3b217972767f9bdc1e5a4263"
       }
     },
     "package://pkg.pkl-lang.org/pkl-pantry/pkl.experimental.deepToTyped@1": {
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index e2347a8c..73242dbc 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -2,5 +2,9 @@ version: 2
 updates:
 - package-ecosystem: github-actions
   directory: /
+  ignore:
+  - dependency-name: '*'
+    update-types:
+    - version-update:semver-major
   schedule:
     interval: weekly
diff --git a/.github/jobs/DeployJob.pkl b/.github/jobs/DeployJob.pkl
index bf2703d4..b2277c45 100644
--- a/.github/jobs/DeployJob.pkl
+++ b/.github/jobs/DeployJob.pkl
@@ -14,7 +14,7 @@ os = "linux"
 
 steps {
   catalog.`actions/checkout@v6`
-  (catalog.`actions/download-artifact@v5`) {
+  (catalog.`actions/download-artifact@v6`) {
     with {
       pattern = "executable-**"
       `merge-multiple` = true
diff --git a/.github/jobs/GithubRelease.pkl b/.github/jobs/GithubRelease.pkl
index 05528eb1..56221ec5 100644
--- a/.github/jobs/GithubRelease.pkl
+++ b/.github/jobs/GithubRelease.pkl
@@ -12,7 +12,7 @@ fixed job {
   }
   needs = "deploy-release"
   steps {
-    (catalog.`actions/download-artifact@v5`) {
+    (catalog.`actions/download-artifact@v6`) {
       with {
         pattern = "executable-**"
         `merge-multiple` = true
diff --git a/.github/workflows/__lockfile__.yml b/.github/workflows/__lockfile__.yml
index 2626d89e..174d5862 100644
--- a/.github/workflows/__lockfile__.yml
+++ b/.github/workflows/__lockfile__.yml
@@ -17,8 +17,8 @@ jobs:
       uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
     - name: actions/create-github-app-token@v2
       uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2
-    - name: actions/download-artifact@v5
-      uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
+    - name: actions/download-artifact@v6
+      uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6
     - name: actions/setup-java@v5
       uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5
     - name: actions/upload-artifact@v5
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 323e97c4..117b36c2 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -790,7 +790,7 @@ jobs:
       checks: write
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
+    - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6
       with:
         pattern: test-results-xml-*
     - name: Publish test results
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 9692c87f..9c8a8420 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -802,7 +802,7 @@ jobs:
     - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
       with:
         persist-credentials: false
-    - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
+    - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6
       with:
         pattern: executable-**
         merge-multiple: true
@@ -836,7 +836,7 @@ jobs:
       checks: write
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
+    - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6
       with:
         pattern: test-results-xml-*
     - name: Publish test results
diff --git a/.github/workflows/release-branch.yml b/.github/workflows/release-branch.yml
index bd5fbdf7..61de801f 100644
--- a/.github/workflows/release-branch.yml
+++ b/.github/workflows/release-branch.yml
@@ -789,7 +789,7 @@ jobs:
       checks: write
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
+    - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6
       with:
         pattern: test-results-xml-*
     - name: Publish test results
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a4393733..f9413a3c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -802,7 +802,7 @@ jobs:
     - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
       with:
         persist-credentials: false
-    - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
+    - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6
       with:
         pattern: executable-**
         merge-multiple: true
@@ -819,7 +819,7 @@ jobs:
       contents: write
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
+    - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6
       with:
         pattern: executable-**
         merge-multiple: true
@@ -862,7 +862,7 @@ jobs:
       checks: write
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
+    - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6
       with:
         pattern: test-results-xml-*
     - name: Publish test results