diff --git a/.github/workflows/cargo-build-stable.yml b/.github/workflows/cargo-build-stable.yml
index 973a8ffb..ec51ed1d 100644
--- a/.github/workflows/cargo-build-stable.yml
+++ b/.github/workflows/cargo-build-stable.yml
@@ -27,17 +27,17 @@ jobs:
       - name: Install latest rust
         uses: dtolnay/rust-toolchain@stable
       - name: Cache cargo registry
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.cargo/registry
           key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}
       - name: Cache cargo index
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.cargo/git
           key: ${{ runner.os }}-cargo-index-${{ hashFiles('**/Cargo.lock') }}
       - name: Cache cargo build
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: target
           key: ${{ runner.os }}-cargo-build-target-${{ hashFiles('**/Cargo.lock') }}
diff --git a/.github/workflows/cargo-clippy.yml b/.github/workflows/cargo-clippy.yml
index 20e89e2b..9e7ea262 100644
--- a/.github/workflows/cargo-clippy.yml
+++ b/.github/workflows/cargo-clippy.yml
@@ -22,17 +22,17 @@ jobs:
         with:            
           components: clippy
       - name: Cache cargo registry
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.cargo/registry
           key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}
       - name: Cache cargo index
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.cargo/git
           key: ${{ runner.os }}-cargo-index-${{ hashFiles('**/Cargo.lock') }}
       - name: Cache cargo build
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: target
           key: ${{ runner.os }}-cargo-build-target-${{ hashFiles('**/Cargo.lock') }}
diff --git a/.github/workflows/cargo-fmt.yml b/.github/workflows/cargo-fmt.yml
index e77df420..e89923e2 100644
--- a/.github/workflows/cargo-fmt.yml
+++ b/.github/workflows/cargo-fmt.yml
@@ -20,7 +20,7 @@ jobs:
     name: cargo fmt
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Install latest rust
         uses: dtolnay/rust-toolchain@stable
diff --git a/.github/workflows/cargo-test.yml b/.github/workflows/cargo-test.yml
index caa78e54..73d9cebb 100644
--- a/.github/workflows/cargo-test.yml
+++ b/.github/workflows/cargo-test.yml
@@ -30,17 +30,17 @@ jobs:
             toolchain: stable
             override: true
       - name: Cache cargo registry
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.cargo/registry
           key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}
       - name: Cache cargo index
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.cargo/git
           key: ${{ runner.os }}-cargo-index-${{ hashFiles('**/Cargo.lock') }}
       - name: Cache cargo build
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: target
           key: ${{ runner.os }}-cargo-build-target-${{ hashFiles('**/Cargo.lock') }}
diff --git a/.github/workflows/flakehub.yml b/.github/workflows/flakehub.yml
index 4643364a..4abcc6d8 100644
--- a/.github/workflows/flakehub.yml
+++ b/.github/workflows/flakehub.yml
@@ -10,7 +10,7 @@ jobs:
       id-token: "write"
       contents: "read"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
         with:
           persist-credentials: false
       - uses: "DeterminateSystems/determinate-nix-action@v3"
diff --git a/.github/workflows/generate-website-docs.yml b/.github/workflows/generate-website-docs.yml
index 2c7b43c7..cb61be89 100644
--- a/.github/workflows/generate-website-docs.yml
+++ b/.github/workflows/generate-website-docs.yml
@@ -15,21 +15,21 @@ jobs:
     name: make-release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Install latest rust
         uses: dtolnay/rust-toolchain@stable
       - name: Cache cargo registry
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.cargo/registry
           key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}
       - name: Cache cargo index
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.cargo/git
           key: ${{ runner.os }}-cargo-index-${{ hashFiles('**/Cargo.lock') }}
       - name: Cache cargo build
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: target
           key: ${{ runner.os }}-cargo-build-target-${{ hashFiles('**/Cargo.lock') }}
@@ -49,7 +49,7 @@ jobs:
           private-key: ${{ secrets.GH_ORG_APP_PRIVATE_KEY }}
           owner: ${{ github.repository_owner }}
       # Checkout the docs repo since we will want to update the files there.
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           repository: 'kittycad/documentation'
           path: 'docs'
diff --git a/.github/workflows/make-cross.yml b/.github/workflows/make-cross.yml
index 2c89081d..79764618 100644
--- a/.github/workflows/make-cross.yml
+++ b/.github/workflows/make-cross.yml
@@ -39,17 +39,17 @@ jobs:
             coreutils \
             jq
       - name: Cache cargo registry
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.cargo/registry
           key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}
       - name: Cache cargo index
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.cargo/git
           key: ${{ runner.os }}-cargo-index-${{ hashFiles('**/Cargo.lock') }}
       - name: Cache cargo build
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: target
           key: ${{ runner.os }}-cargo-build-target-${{ hashFiles('**/Cargo.lock') }}
diff --git a/.github/workflows/make-release.yml b/.github/workflows/make-release.yml
index 93f83f8e..65b357d9 100644
--- a/.github/workflows/make-release.yml
+++ b/.github/workflows/make-release.yml
@@ -13,13 +13,13 @@ jobs:
     name: make release
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: 'Authenticate to Google Cloud'
-        uses: 'google-github-actions/auth@v2.1.11'
+        uses: 'google-github-actions/auth@v3.0.0'
         with:
           credentials_json: '${{ secrets.GOOGLE_CLOUD_DL_SA }}'
       - name: Set up Cloud SDK
-        uses: google-github-actions/setup-gcloud@v2.1.5
+        uses: google-github-actions/setup-gcloud@v3.0.1
         with:
           project_id: kittycadapi
       - name: Install latest nightly
@@ -39,17 +39,17 @@ jobs:
 
           cargo install toml-cli
       - name: Cache cargo registry
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.cargo/registry
           key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}
       - name: Cache cargo index
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.cargo/git
           key: ${{ runner.os }}-cargo-index-${{ hashFiles('**/Cargo.lock') }}
       - name: Cache cargo build
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: target
           key: ${{ runner.os }}-cargo-build-target-${{ hashFiles('**/Cargo.lock') }}
@@ -68,19 +68,19 @@ jobs:
           cp cross/README.md cross/${{matrix.os}}-${{github.ref_name}}-README.md
       - name: 'upload binary files'
         id: upload-files
-        uses: google-github-actions/upload-cloud-storage@v2.2.3
+        uses: google-github-actions/upload-cloud-storage@v3.0.0
         with:
           path: releases
           destination: dl.kittycad.io
       # Store the binary artifacts for retrival later.
       - name: Upload artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: release-${{ matrix.os }}-${{github.ref_name}}
           path: ./cross
       # Store the readme as an artifact so we can combine the two.
       - name: Archive the README.md data
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: ${{matrix.os}}-${{github.ref_name}}-README.md
           path: ${{github.workspace}}/cross/${{matrix.os}}-${{github.ref_name}}-README.md
@@ -89,21 +89,21 @@ jobs:
     needs: [makerelease]
     name: createrelease
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Install latest nightly
         uses: dtolnay/rust-toolchain@stable
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v7
         with:
           name:  release-macos-latest-${{github.ref_name}}
           path: build
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v7
         with:
           name:  release-ubuntu-latest-${{github.ref_name}}
           path: build
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v7
         with:
           name:  ubuntu-latest-${{github.ref_name}}-README.md
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v7
         with:
           name:  macos-latest-${{github.ref_name}}-README.md
       - name: combine readmes
@@ -145,11 +145,11 @@ jobs:
     steps:
       - uses: actions/checkout@master
       - name: 'Authenticate to Google Cloud'
-        uses: 'google-github-actions/auth@v2.1.11'
+        uses: 'google-github-actions/auth@v3.0.0'
         with:
           credentials_json: '${{ secrets.GOOGLE_CLOUD_DL_SA }}'
       - name: Set up Cloud SDK
-        uses: google-github-actions/setup-gcloud@v2.1.5
+        uses: google-github-actions/setup-gcloud@v3.0.1
         with:
           project_id: kittycadapi
       - name: Install deps
@@ -217,7 +217,7 @@ jobs:
           cp -r homebrew releases/$(basename $(pwd))/${VERSION}
       - name: 'upload binary files'
         id: upload-files
-        uses: google-github-actions/upload-cloud-storage@v2.2.3
+        uses: google-github-actions/upload-cloud-storage@v3.0.0
         with:
           path: releases
           destination: dl.kittycad.io
@@ -228,7 +228,7 @@ jobs:
           app-id: ${{ secrets.GH_ORG_APP_ID }}
           private-key: ${{ secrets.GH_ORG_APP_PRIVATE_KEY }}
           owner: ${{ github.repository_owner }}
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           repository: 'kittycad/homebrew-kittycad'
           path: 'homebrew-kittycad'
diff --git a/.github/workflows/nix.yml b/.github/workflows/nix.yml
index 435ca7a2..91b2a83f 100644
--- a/.github/workflows/nix.yml
+++ b/.github/workflows/nix.yml
@@ -13,7 +13,7 @@ jobs:
   nix-flake-check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           submodules: recursive
 
@@ -28,7 +28,7 @@ jobs:
   nix-build-linux:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           submodules: recursive
 
@@ -42,7 +42,7 @@ jobs:
   nix-build-macos:
     runs-on: macos-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           submodules: recursive