diff --git a/.github/workflows/benchmarks.yml b/.github/workflows/benchmarks.yml
index 3a0af8fa66c..b3553f259cc 100644
--- a/.github/workflows/benchmarks.yml
+++ b/.github/workflows/benchmarks.yml
@@ -25,13 +25,13 @@ jobs:
 
     steps:
       - name: Checkout current repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           show-progress: false
 
       - name: Checkout performance data repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           repository: ChilliCream/graphql-platform-performance-data
           token: ${{ secrets.PERFORMANCE_DATA_TOKEN }}
@@ -86,7 +86,7 @@ jobs:
 
       - name: Comment PR with performance report
         if: github.event_name == 'pull_request'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
@@ -115,7 +115,7 @@ jobs:
             });
 
       - name: Upload performance data as artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         if: always()
         with:
           name: fusion-gateway-performance-data
diff --git a/.github/workflows/ci-cleanup.yml b/.github/workflows/ci-cleanup.yml
index 86ff81da617..4c67abc47d5 100644
--- a/.github/workflows/ci-cleanup.yml
+++ b/.github/workflows/ci-cleanup.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           show-progress: false
 
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ed8dd27fdde..eec6537c5ee 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,7 +20,7 @@ jobs:
       src_changes: ${{ steps.check-src.outputs.src_changes }}
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 2
           show-progress: false
@@ -63,18 +63,18 @@ jobs:
     needs: check-changes
     if: needs.check-changes.outputs.website_changes == 'true'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         name: Check out the code
         with:
           show-progress: false
 
       - name: Install Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
 
       - name: Install cspell
-        run: npm install -g cspell
+        run: npm install -g cspell@9.4.0
 
       - name: run cspell
         run: cspell --config ./cspell.json "website/src/**/*.md" --no-progress --no-cache
@@ -83,15 +83,15 @@ jobs:
     name: "Markdown linting"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         name: Check out the code
         with:
           show-progress: false
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         name: Setup node
         with:
-          node-version: 22
-      - run: npm install -g markdownlint-cli2@0.19.0
+          node-version: 24
+      - run: npm install -g markdownlint-cli2@0.20.0
         name: Install markdownlint-cli2
       - run: markdownlint-cli2 "*.md" "website/src/**/*.md"
         name: run Markdownlint
@@ -103,14 +103,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           show-progress: false
 
       - name: Install Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
           cache: "yarn"
           cache-dependency-path: "website/yarn.lock"
 
@@ -143,12 +143,12 @@ jobs:
 
     steps:
       - name: Checkout to repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           show-progress: false
 
       - name: Install .NET
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v5
         with:
           dotnet-version: 10.x
 
@@ -173,12 +173,12 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           show-progress: false
 
       - name: Install .NET
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v5
         with:
           dotnet-version: |
             8.x
@@ -217,13 +217,13 @@ jobs:
           CI_BUILD: true
 
       - name: Upload Test Results as Artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: test-results-${{ matrix.name }}
           path: ${{ matrix.directoryPath }}/TestResults/*.trx
 
       - name: Upload Coverage File as Artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: coverage-${{ matrix.name }}
           # The * matches a single directory that is named with a GUID.
@@ -232,7 +232,7 @@ jobs:
 
       - name: Upload mismatch files as Artifact
         if: steps.run-tests.outcome == 'failure'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: mismatch-files-${{ matrix.name }}
           path: ${{ matrix.directoryPath }}/**/__mismatch__/*
@@ -243,7 +243,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Download all coverage artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v6
         with:
           path: ./output/download
           pattern: coverage-*
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 9ccd6b1aa3a..3eacfc5568b 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -22,12 +22,12 @@ jobs:
 
     steps:
       - name: Checkout to repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           show-progress: false
 
       - name: Install .NET
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v5
         with:
           dotnet-version: |
             8.x
@@ -54,12 +54,12 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           show-progress: false
 
       - name: Install .NET
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v5
         with:
           dotnet-version: |
             8.x
@@ -94,13 +94,13 @@ jobs:
           CI_BUILD: true
 
       - name: Upload Test Results as Artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: test-results-${{ matrix.name }}
           path: ${{ matrix.directoryPath }}/TestResults/*.trx
 
       - name: Upload Coverage File as Artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: coverage-${{ matrix.name }}
           # The * matches a single directory that is named with a GUID.
@@ -109,7 +109,7 @@ jobs:
 
       - name: Upload mismatch files as Artifact
         if: failure()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: mismatch-files-${{ matrix.name }}
           path: ${{ matrix.directoryPath }}/**/__mismatch__/*
@@ -126,7 +126,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Download all coverage artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v6
         with:
           path: ./output/download
           pattern: coverage-*
diff --git a/.github/workflows/pr-labeler.yml b/.github/workflows/pr-labeler.yml
index db241609750..2a1809c27d1 100644
--- a/.github/workflows/pr-labeler.yml
+++ b/.github/workflows/pr-labeler.yml
@@ -12,4 +12,4 @@ jobs:
     name: Apply Labels
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/labeler@v5
+      - uses: actions/labeler@v6
diff --git a/.github/workflows/publish-website.yml b/.github/workflows/publish-website.yml
index cd34daf0c73..646a5df2557 100644
--- a/.github/workflows/publish-website.yml
+++ b/.github/workflows/publish-website.yml
@@ -16,7 +16,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           show-progress: false
 
@@ -30,9 +30,9 @@ jobs:
       - run: echo ${{ secrets.CONTAINER_REG_URL }}
 
       - name: Install Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
           cache: "yarn"
           cache-dependency-path: "website/yarn.lock"
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 11f9ba543ee..20dc8e3271a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,12 +18,12 @@ jobs:
 
     steps:
       - name: 📦 Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           show-progress: false
 
       - name: 🛠 Install .NET
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v5
         with:
           dotnet-version: |
             8.x
@@ -99,10 +99,10 @@ jobs:
 
     steps:
       - name: 📦 Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: 🛠 Install .NET
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v5
         with:
           dotnet-version: 10.x
 
@@ -168,8 +168,8 @@ jobs:
       - name: 🖋️ Setup signing resources (macOS)
         if: runner.os == 'macOS'
         env:
-          BUILD_CERTIFICATE_BASE64: ${{ secrets.APPLE_DEVELOPER_CERTFICATE_BASE64 }}
-          P12_PASSWORD: ${{ secrets.APPLE_DEVELOPER_CERTFICATE_PASSWORD }}
+          BUILD_CERTIFICATE_BASE64: ${{ secrets.APPLE_DEVELOPER_CERTIFICATE_BASE64 }}
+          P12_PASSWORD: ${{ secrets.APPLE_DEVELOPER_CERTIFICATE_PASSWORD }}
           KEYCHAIN_PASSWORD: ${{ secrets.TEMPORARY_KEYCHAIN_PASSWORD }}
         run: |
           # create variables
@@ -254,7 +254,7 @@ jobs:
           security delete-keychain $RUNNER_TEMP/app-signing.keychain-db
 
       - name: 📤 Upload zipped binary as artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: nitro-${{ matrix.rid }}
           path: nitro-${{ matrix.rid }}.zip
@@ -276,12 +276,12 @@ jobs:
 
     steps:
       - name: 📦 Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: 🧰 Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: "22.x"
+          node-version: 24
           registry-url: ${{ vars.NPM_REGISTRY_URL }}
           scope: "@chillicream"
 
@@ -289,7 +289,7 @@ jobs:
         run: corepack enable
 
       - name: 📥 Download all zipped nitro binaries
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v6
         with:
           pattern: nitro-*
           merge-multiple: true
@@ -350,7 +350,7 @@ jobs:
         shell: bash
 
       - name: 📤 Upload tarball as artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: chillicream-nitro-${{ env.GIT_TAG }}.tgz
           path: src/Nitro/CommandLine/src/chillicream-nitro/chillicream-nitro-${{ env.GIT_TAG }}.tgz
@@ -370,7 +370,7 @@ jobs:
 
     steps:
       - name: 📥 Checkout main repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
@@ -428,7 +428,7 @@ jobs:
           EOF
 
       - name: 📥 Checkout homebrew repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           repository: ChilliCream/homebrew-tools
           token: ${{ secrets.HOMEBREW_TAP_TOKEN }}
diff --git a/dictionary.txt b/dictionary.txt
index 79d42707fdf..39194152583 100644
--- a/dictionary.txt
+++ b/dictionary.txt
@@ -31,12 +31,14 @@ cadastre
 callsite
 CCPA
 chillicream
+CODESIGN
 Codespaces
 colocated
 combinators
 contentfiles
 Contoso
 CQRS
+creds
 dataloaders
 debuggable
 decompile
@@ -77,6 +79,8 @@ inheritdocs
 initializable
 inspectable
 Kellner
+keyrings
+keyserver
 Kydne
 LASTEXITCODE
 Leia
@@ -108,11 +112,13 @@ nlte
 Noda
 nologo
 Normen
+notarytool
 noverlaps
 Npgsql
 nstartsWith
 NSwag
 ntouches
+NUGETAPIKEY
 nwithin
 oncall
 opencover
@@ -133,6 +139,7 @@ preparables
 PRIMEM
 PROJCS
 protobuf
+publishaot
 queryables
 quox
 quux
@@ -160,6 +167,7 @@ Skywalker
 snapshooter
 snupkg
 sortings
+spctl
 Specwise
 sqft
 srid
@@ -184,15 +192,18 @@ Toub
 TOWGS
 Trimmable
 Tzdb
+unittests
 unlisten
 unpublish
 Unsubscriber
 Upsert
 upvote
 URQL
+vnext
 vsix
 VXNlcjox
 websockets
 Wilhuff
 Wunder
+xcrun
 xunit