diff --git a/.github/workflows/ai-flag-cleanup-pr.yml b/.github/workflows/ai-flag-cleanup-pr.yml
index 31229d5c77..c36192f38f 100644
--- a/.github/workflows/ai-flag-cleanup-pr.yml
+++ b/.github/workflows/ai-flag-cleanup-pr.yml
@@ -57,7 +57,7 @@ jobs:
 
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref:                 ${{ github.ref }}
           token:               ${{ steps.app_token.outputs.token }}
@@ -140,7 +140,7 @@ jobs:
             return branchName;
 
       - name: Check out new branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref:                 ${{ steps.create_branch.outputs.result }}
           token:               ${{ steps.app_token.outputs.token }}
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index db27215d04..d65676b8d2 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -38,9 +38,9 @@ jobs:
 
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Use Node.js 20
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 22.x
           cache: 'yarn'
@@ -55,4 +55,4 @@ jobs:
         env:
           CI: true
           TEST_DATABASE_URL: postgres://postgres:postgres@localhost:5432/postgres
-          DATABASE_URL: postgres://postgres:postgres@localhost:5432/postgres 
+          DATABASE_URL: postgres://postgres:postgres@localhost:5432/postgres
diff --git a/.github/workflows/build_coverage.yaml b/.github/workflows/build_coverage.yaml
index 2883066769..9f2145c425 100644
--- a/.github/workflows/build_coverage.yaml
+++ b/.github/workflows/build_coverage.yaml
@@ -31,9 +31,9 @@ jobs:
 
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Use Node.js 22
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 22.x
           cache: 'yarn'
diff --git a/.github/workflows/build_doc_prs.yaml b/.github/workflows/build_doc_prs.yaml
index 3f848a6243..547926ce5d 100644
--- a/.github/workflows/build_doc_prs.yaml
+++ b/.github/workflows/build_doc_prs.yaml
@@ -15,7 +15,7 @@ jobs:
     name: build # temporary solution to trick branch protection rules
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Build docs
         env:
           UNLEASH_FEEDBACK_TARGET_URL: ${{ secrets.DOCS_FEEDBACK_TARGET_URL }}
diff --git a/.github/workflows/build_frontend_prs.yml b/.github/workflows/build_frontend_prs.yml
index 9b0b046a8c..27d887f866 100644
--- a/.github/workflows/build_frontend_prs.yml
+++ b/.github/workflows/build_frontend_prs.yml
@@ -16,9 +16,9 @@ jobs:
         working-directory: frontend
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Use Node.js 20.x
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 22.x
       - name: Enable corepack
diff --git a/.github/workflows/build_prs_jest_report.yaml b/.github/workflows/build_prs_jest_report.yaml
index 128eda3c23..e819590e69 100644
--- a/.github/workflows/build_prs_jest_report.yaml
+++ b/.github/workflows/build_prs_jest_report.yaml
@@ -34,9 +34,9 @@ jobs:
 
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Use Node.js 22.x
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 22.x
           cache: 'yarn'
diff --git a/.github/workflows/check_links.yaml b/.github/workflows/check_links.yaml
index 6715e5feb8..bd6d6b8af3 100644
--- a/.github/workflows/check_links.yaml
+++ b/.github/workflows/check_links.yaml
@@ -15,7 +15,7 @@ jobs:
       issue-lookup-label: automated-link-issue
       issue-content: ./lychee-out.md
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Restore lychee cache
         uses: actions/cache@v4
         with:
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 7ac710e5f4..21a437bd50 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -38,7 +38,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 1f11a2ebba..1d46767dcf 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Dependency review
         uses: actions/dependency-review-action@v4
         with:
diff --git a/.github/workflows/docker_publish.yaml b/.github/workflows/docker_publish.yaml
index 584d98887d..9800a3d5e6 100644
--- a/.github/workflows/docker_publish.yaml
+++ b/.github/workflows/docker_publish.yaml
@@ -28,16 +28,16 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        version: [22.17-alpine3.22]
+        version: [22.21-alpine3.23]
     steps:
       - name: Checkout tag v${{ inputs.version }}
         if: ${{ inputs.version != '' }}
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: v${{ inputs.version }} # tag that should be created by the caller workflow
       - name: Checkout
         if: ${{ inputs.version == '' }}
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Configure AWS credentials
         uses: aws-actions/configure-aws-credentials@v4
         with:
diff --git a/.github/workflows/e2e.frontend.yaml b/.github/workflows/e2e.frontend.yaml
index 79782680ef..42eee8e4f0 100644
--- a/.github/workflows/e2e.frontend.yaml
+++ b/.github/workflows/e2e.frontend.yaml
@@ -26,7 +26,7 @@ jobs:
         run: |
           echo "$GITHUB_CONTEXT"
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Build static frontend
         run: |
           cd frontend
diff --git a/.github/workflows/gitar-duet-action.yml b/.github/workflows/gitar-duet-action.yml
index 884abffd51..e0eba94ad4 100644
--- a/.github/workflows/gitar-duet-action.yml
+++ b/.github/workflows/gitar-duet-action.yml
@@ -16,13 +16,13 @@ jobs:
     steps:
       - run: |
           echo '${{ toJSON(github.event) }}'
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.head_ref }}
           fetch-depth: 0
 
       - name: Use Node.js 20
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 22.x
           cache: 'yarn'
diff --git a/.github/workflows/gradual-strict-null-checks.yml b/.github/workflows/gradual-strict-null-checks.yml
index a5104795de..f956f2b328 100644
--- a/.github/workflows/gradual-strict-null-checks.yml
+++ b/.github/workflows/gradual-strict-null-checks.yml
@@ -19,16 +19,16 @@ jobs:
 
     steps:
       - name: Checkout current branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           path: current
       - name: Checkout main branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ env.MAIN_BRANCH }}
           path: main
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 22.x
           cache: 'yarn'
diff --git a/.github/workflows/hypermod.yml b/.github/workflows/hypermod.yml
index 88f52437f7..f175cc2ac9 100644
--- a/.github/workflows/hypermod.yml
+++ b/.github/workflows/hypermod.yml
@@ -12,11 +12,11 @@ jobs:
     permissions: write-all
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Run Hypermod CLI
         uses: hypermod-io/action@v1
         with:
           deploymentId: ${{ inputs.deploymentId }}
           deploymentKey: ${{ inputs.deploymentKey }}
     env:
-      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
\ No newline at end of file
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/notify_enterprise.yaml b/.github/workflows/notify_enterprise.yaml
index bbdcf26263..357fc42a43 100644
--- a/.github/workflows/notify_enterprise.yaml
+++ b/.github/workflows/notify_enterprise.yaml
@@ -13,9 +13,9 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Use Node.js 20
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 22.x
           cache: 'yarn'
diff --git a/.github/workflows/openapi-diff.yaml b/.github/workflows/openapi-diff.yaml
index 426b7938c3..1967a18f3e 100644
--- a/.github/workflows/openapi-diff.yaml
+++ b/.github/workflows/openapi-diff.yaml
@@ -21,7 +21,7 @@ jobs:
     name: Generate OpenAPI (stable)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Start Unleash test instance
         run: |
           docker compose -f .github/docker-compose.test.yml up -d --wait -t 90
@@ -67,9 +67,9 @@ jobs:
         options: >-
           --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Install node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 22.x
       - name: Install dependencies
diff --git a/.github/workflows/publish-new-version.yaml b/.github/workflows/publish-new-version.yaml
index e0417baa8e..84e81b3bea 100644
--- a/.github/workflows/publish-new-version.yaml
+++ b/.github/workflows/publish-new-version.yaml
@@ -49,7 +49,7 @@ jobs:
           --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
           token: ${{ secrets.GH_PUSH_TOKEN }}
@@ -60,7 +60,7 @@ jobs:
           git config user.name "Github Actions Bot"
           git config user.email "<>"
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node-version }}
           cache: 'yarn'
@@ -114,7 +114,7 @@ jobs:
 
     steps:
       - name: checkout main branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: main
           fetch-depth: 0
@@ -124,7 +124,7 @@ jobs:
           git config user.name "GitHub Actions Bot"
           git config user.email "<>"
       - name: Use Node js 20
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '22.x'
           cache: 'yarn'
diff --git a/.github/workflows/reset_heroku.yml b/.github/workflows/reset_heroku.yml
index bdad988ae4..6e1a4d37b1 100644
--- a/.github/workflows/reset_heroku.yml
+++ b/.github/workflows/reset_heroku.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Install Heroku CLI
         run: |
diff --git a/.github/workflows/update_contributors.yaml b/.github/workflows/update_contributors.yaml
index 248ddd03c5..38661ac6ca 100644
--- a/.github/workflows/update_contributors.yaml
+++ b/.github/workflows/update_contributors.yaml
@@ -9,9 +9,9 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Use Node.js 20.x
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 22.x
       - uses: actions/checkout@master
diff --git a/.github/workflows/validate-migrations.yaml b/.github/workflows/validate-migrations.yaml
index deaa79f45e..26141145cf 100644
--- a/.github/workflows/validate-migrations.yaml
+++ b/.github/workflows/validate-migrations.yaml
@@ -15,9 +15,9 @@ jobs:
   test-migrations:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Use Node.js 20.x
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 22.x
           cache: 'yarn'
diff --git a/Dockerfile b/Dockerfile
index 81494c59fb..8e7ee9a568 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-ARG NODE_VERSION=22.17-alpine3.22
+ARG NODE_VERSION=22.21-alpine3.23
 
 FROM node:$NODE_VERSION AS builder