diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 4a5bb8d..9f9ce70 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -22,7 +22,7 @@ jobs:
 
     runs-on: ubuntu-22.04
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v6
       with:
         submodules: recursive
     - name: Install dependencies
diff --git a/.github/workflows/jedi.yml b/.github/workflows/jedi.yml
index d5df1b6..cf6aa45 100644
--- a/.github/workflows/jedi.yml
+++ b/.github/workflows/jedi.yml
@@ -7,7 +7,7 @@ jobs:
     if: github.ref_type != 'tag'
     runs-on: ubuntu-22.04
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v6
     - run: pipx install poetry
     - run: poetry install
       working-directory: ./jedi
diff --git a/.github/workflows/publish-ide-docs.yml b/.github/workflows/publish-ide-docs.yml
index 1c25341..f5b5687 100644
--- a/.github/workflows/publish-ide-docs.yml
+++ b/.github/workflows/publish-ide-docs.yml
@@ -15,11 +15,11 @@ jobs:
       run: |
         sudo apt-get update
         sudo apt-get install -y dvisvgm preview-latex-style texlive texlive-fonts-extra texlive-latex-extra
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v6
       with:
         submodules: recursive
     - name: Set up Python 3.8
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: 3.8
     - name: Install dependencies
@@ -28,9 +28,9 @@ jobs:
         poetry run python -m pip install --upgrade pip
         poetry run python -m pip install --upgrade setuptools
         poetry install --only=doc
-    - uses: actions/setup-node@v3
+    - uses: actions/setup-node@v4
       with:
-        node-version: '18.x'
+        node-version: '22.x'
         registry-url: 'https://registry.npmjs.org'
     - run: npm version --no-git-tag-version "$VERSION"
       working-directory: npm/ide-docs
diff --git a/.github/workflows/publish-images.yml b/.github/workflows/publish-images.yml
index 28396e2..0f15265 100644
--- a/.github/workflows/publish-images.yml
+++ b/.github/workflows/publish-images.yml
@@ -9,11 +9,11 @@ jobs:
   publish_ide_docs:
     runs-on: ubuntu-22.04
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v6
     # Setup .npmrc file to publish to npm
-    - uses: actions/setup-node@v3
+    - uses: actions/setup-node@v4
       with:
-        node-version: '16.x'
+        node-version: '22.x'
         registry-url: 'https://registry.npmjs.org'
     - run: ./build.py
       working-directory: npm/images
diff --git a/.github/workflows/publish-jedi.yml b/.github/workflows/publish-jedi.yml
index 1056290..e6ae7b8 100644
--- a/.github/workflows/publish-jedi.yml
+++ b/.github/workflows/publish-jedi.yml
@@ -9,11 +9,11 @@ jobs:
   publish_jedi:
     runs-on: ubuntu-22.04
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v6
     - name: Get version from tag
       run: echo "VERSION=${GITHUB_REF_NAME#v}" >> $GITHUB_ENV
     - name: Set up Python
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: '3.11'
     - name: Install poetry
@@ -21,9 +21,9 @@ jobs:
     - name: Set pybricks-jedi version
       run: poetry version "$VERSION"
       working-directory: jedi
-    - uses: actions/setup-node@v3
+    - uses: actions/setup-node@v4
       with:
-        node-version: '18.x'
+        node-version: '22.x'
         registry-url: 'https://registry.npmjs.org'
     - run: ./build.py "$VERSION"
       working-directory: npm/jedi
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d5d3a2f..1b3bda6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
         with:
           submodules: true
           fetch-depth: 0
@@ -38,7 +38,7 @@ jobs:
   build_and_publish:
     runs-on: ubuntu-22.04
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v6
     - run: pipx run poetry build
     - run: pipx run poetry publish
       env:
diff --git a/build-all.sh b/build-all.sh
index f078707..13f9dfa 100755
--- a/build-all.sh
+++ b/build-all.sh
@@ -2,7 +2,7 @@
 # Build all release artifacts locally (equivalent to CI workflows, minus publish).
 set -euo pipefail
 
-REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="$(realpath "$(dirname "${BASH_SOURCE[0]}")")"
 
 # Activate the project venv so python/make/etc. all use it without poetry run
 source "$REPO_ROOT/.venv/bin/activate"