diff --git a/.forgejo/workflows/publish.yml b/.forgejo/workflows/publish.yml
index de48e73..20009d4 100644
--- a/.forgejo/workflows/publish.yml
+++ b/.forgejo/workflows/publish.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: docker
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Build and publish image
         uses: http://forgejo:3000/andras/ci-actions/docker-publish@main
diff --git a/.forgejo/workflows/test.yml b/.forgejo/workflows/test.yml
index cc0b1bd..c5a7222 100644
--- a/.forgejo/workflows/test.yml
+++ b/.forgejo/workflows/test.yml
@@ -14,7 +14,7 @@ jobs:
       run:
         working-directory: backend
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Install uv
         run: |
@@ -37,11 +37,11 @@ jobs:
       run:
         working-directory: frontend
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
-          node-version: '22'
+          node-version: '26'
           cache: npm
           cache-dependency-path: frontend/package-lock.json
 
@@ -58,11 +58,11 @@ jobs:
       run:
         working-directory: frontend
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
-          node-version: '22'
+          node-version: '26'
           cache: npm
           cache-dependency-path: frontend/package-lock.json
 
@@ -79,11 +79,11 @@ jobs:
       run:
         working-directory: frontend
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
-          node-version: '22'
+          node-version: '26'
           cache: npm
           cache-dependency-path: frontend/package-lock.json
 
@@ -98,7 +98,7 @@ jobs:
     runs-on: docker
     needs: [backend, frontend-build]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Ensure Docker CLI
         run: |
@@ -165,7 +165,7 @@ jobs:
 
       - name: Upload Playwright report
         if: always()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v7
         with:
           name: playwright-report
           path: frontend/playwright-report
@@ -174,7 +174,7 @@ jobs:
 
       - name: Upload visual screenshots
         if: always()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v7
         with:
           name: playwright-visuals
           path: frontend/visuals
diff --git a/Dockerfile b/Dockerfile
index 483f8e6..b014d39 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # Stage 1: SPA build
-FROM node:22-alpine AS spa-build
+FROM node:26-alpine AS spa-build
 WORKDIR /build
 # Sub-path the SPA is served under, e.g. "/towers/" for https://schmelczer.dev/towers/.
 # Defaults to "/" so local/dev/e2e builds (served at the container root) work
@@ -27,7 +27,7 @@ RUN npm run build -- --base-href="$BASE_HREF" \
        fi
 
 # Stage 2: runtime
-FROM python:3.13-slim
+FROM python:3.15-slim
 
 # Runtime essentials:
 #   curl     — used by HEALTHCHECK
diff --git a/frontend/package.json b/frontend/package.json
index a9aaf77..751db9a 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -12,32 +12,32 @@
     "lint": "ng lint"
   },
   "private": true,
-  "packageManager": "npm@10.9.2",
+  "packageManager": "npm@12.2.1",
   "dependencies": {
-    "@angular/cdk": "^21.2.13",
+    "@angular/cdk": "^22.0.0",
     "@plausible-analytics/tracker": "^0.4.5",
-    "@angular/common": "^21.2.0",
-    "@angular/compiler": "^21.2.0",
-    "@angular/core": "^21.2.0",
-    "@angular/forms": "^21.2.0",
-    "@angular/platform-browser": "^21.2.0",
-    "@angular/service-worker": "^21.2.0",
+    "@angular/common": "^22.0.0",
+    "@angular/compiler": "^22.0.0",
+    "@angular/core": "^22.0.0",
+    "@angular/forms": "^22.0.0",
+    "@angular/platform-browser": "^22.0.0",
+    "@angular/service-worker": "^22.0.0",
     "rxjs": "~7.8.0",
     "tslib": "^2.3.0"
   },
   "devDependencies": {
-    "@angular/build": "^21.2.13",
-    "@angular/cli": "^21.2.13",
-    "@angular/compiler-cli": "^21.2.0",
+    "@angular/build": "^22.0.0",
+    "@angular/cli": "^22.0.0",
+    "@angular/compiler-cli": "^22.0.0",
     "@eslint/js": "^10.0.1",
     "@playwright/test": "^1.60.0",
-    "@vitest/coverage-v8": "^4.1.7",
-    "angular-eslint": "21.4.0",
+    "@vitest/coverage-v8": "^5.0.0",
+    "angular-eslint": "22.6.0",
     "eslint": "^10.3.0",
-    "jsdom": "^28.1.0",
+    "jsdom": "^30.0.0",
     "prettier": "^3.8.1",
-    "typescript": "~5.9.2",
-    "typescript-eslint": "8.59.2",
-    "vitest": "^4.1.7"
+    "typescript": "~7.0.0",
+    "typescript-eslint": "8.72.1",
+    "vitest": "^5.0.0"
   }
 }