diff --git a/.github/workflows/ai-code-review.yml b/.github/workflows/ai-code-review.yml
index b556ef71ab..3a4c3a9d6a 100644
--- a/.github/workflows/ai-code-review.yml
+++ b/.github/workflows/ai-code-review.yml
@@ -20,7 +20,7 @@ jobs:
       actions: read
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 1
       - name: Install uv
diff --git a/.github/workflows/backend-checks.yml b/.github/workflows/backend-checks.yml
index e162426d12..de33fe357f 100644
--- a/.github/workflows/backend-checks.yml
+++ b/.github/workflows/backend-checks.yml
@@ -15,7 +15,7 @@ jobs:
         working-directory: backend
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: actions/setup-python@v5
         with:
           python-version: "3.13.5"
diff --git a/.github/workflows/backend-test.yml b/.github/workflows/backend-test.yml
index 11622fe5d4..4ff391464d 100644
--- a/.github/workflows/backend-test.yml
+++ b/.github/workflows/backend-test.yml
@@ -35,7 +35,7 @@ jobs:
           - 6379:6379
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: actions/setup-python@v5
         with:
           python-version: "3.13.5"
diff --git a/.github/workflows/build-backend.yml b/.github/workflows/build-backend.yml
index 207bd45f0c..0d87969d3c 100644
--- a/.github/workflows/build-backend.yml
+++ b/.github/workflows/build-backend.yml
@@ -10,12 +10,12 @@ jobs:
     name: Build
     runs-on: ubuntu-24.04-arm
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.ref }}
           fetch-depth: 0
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4
+        uses: aws-actions/configure-aws-credentials@v6
         with:
           aws-access-key-id: ${{ secrets.aws_access_key_id }}
           aws-secret-access-key: ${{ secrets.aws_secret_access_key }}
diff --git a/.github/workflows/build-base-pretix.yml b/.github/workflows/build-base-pretix.yml
index 11785a586e..b77d289650 100644
--- a/.github/workflows/build-base-pretix.yml
+++ b/.github/workflows/build-base-pretix.yml
@@ -24,7 +24,7 @@ jobs:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           repository: pretix/pretix
           ref: ${{ inputs.version }}
diff --git a/.github/workflows/build-frontend.yml b/.github/workflows/build-frontend.yml
index 5feae9e1c4..2c65da6af4 100644
--- a/.github/workflows/build-frontend.yml
+++ b/.github/workflows/build-frontend.yml
@@ -13,12 +13,12 @@ jobs:
     name: Build
     runs-on: ubuntu-24.04-arm
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.ref }}
           fetch-depth: 0
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4
+        uses: aws-actions/configure-aws-credentials@v6
         with:
           aws-access-key-id: ${{ secrets.aws_access_key_id }}
           aws-secret-access-key: ${{ secrets.aws_secret_access_key }}
diff --git a/.github/workflows/build-pretix.yml b/.github/workflows/build-pretix.yml
index 3e05568a07..580cc3429c 100644
--- a/.github/workflows/build-pretix.yml
+++ b/.github/workflows/build-pretix.yml
@@ -10,12 +10,12 @@ jobs:
     name: Build pretix
     runs-on: ubuntu-24.04-arm
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.ref }}
           fetch-depth: 0
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4
+        uses: aws-actions/configure-aws-credentials@v6
         with:
           aws-access-key-id: ${{ secrets.aws_access_key_id }}
           aws-secret-access-key: ${{ secrets.aws_secret_access_key }}
diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
index 60acf96e54..8d860220d7 100644
--- a/.github/workflows/claude.yml
+++ b/.github/workflows/claude.yml
@@ -30,7 +30,7 @@ jobs:
       actions: read
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 1
       - name: Install uv
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 0cddc032d2..5955260827 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -19,12 +19,12 @@ jobs:
       image_exists: ${{ steps.image.outputs.image_exists }}
       githash: ${{ steps.git.outputs.githash }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.ref }}
           fetch-depth: 0
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4
+        uses: aws-actions/configure-aws-credentials@v6
         with:
           aws-access-key-id: ${{ secrets.aws_access_key_id }}
           aws-secret-access-key: ${{ secrets.aws_secret_access_key }}
@@ -52,12 +52,12 @@ jobs:
       image_exists: ${{ steps.image.outputs.image_exists }}
       githash: ${{ steps.git.outputs.githash }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.ref }}
           fetch-depth: 0
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4
+        uses: aws-actions/configure-aws-credentials@v6
         with:
           aws-access-key-id: ${{ secrets.aws_access_key_id }}
           aws-secret-access-key: ${{ secrets.aws_secret_access_key }}
@@ -85,12 +85,12 @@ jobs:
       image_exists: ${{ steps.image.outputs.image_exists }}
       githash: ${{ steps.git.outputs.githash }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.ref }}
           fetch-depth: 0
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4
+        uses: aws-actions/configure-aws-credentials@v6
         with:
           aws-access-key-id: ${{ secrets.aws_access_key_id }}
           aws-secret-access-key: ${{ secrets.aws_secret_access_key }}
@@ -140,11 +140,11 @@ jobs:
       run:
         working-directory: ./infrastructure/applications
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.ref }}
           fetch-depth: 0
-      - uses: opentofu/setup-opentofu@v1
+      - uses: opentofu/setup-opentofu@v2
         with:
           tofu_version: 1.9.0
       - name: OpenTofu Init
@@ -170,7 +170,7 @@ jobs:
     needs: [deploy-be, check-backend-build]
     if: always() && !cancelled() && !failure() && !contains(needs.*.result, 'failure') && !contains(needs.*.result, 'cancelled')
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.ref }}
           fetch-depth: 0
@@ -201,11 +201,11 @@ jobs:
       run:
         working-directory: ./infrastructure/applications
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.ref }}
           fetch-depth: 0
-      - uses: opentofu/setup-opentofu@v1
+      - uses: opentofu/setup-opentofu@v2
         with:
           tofu_version: 1.9.0
       - name: OpenTofu Init
@@ -231,7 +231,7 @@ jobs:
     needs: [deploy-fe, check-frontend-build]
     if: always() && !cancelled() && !failure() && !contains(needs.*.result, 'failure') && !contains(needs.*.result, 'cancelled')
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.ref }}
           fetch-depth: 0
diff --git a/.github/workflows/frontend-lint.yml b/.github/workflows/frontend-lint.yml
index 9cd4b8028a..8e3c11b44b 100644
--- a/.github/workflows/frontend-lint.yml
+++ b/.github/workflows/frontend-lint.yml
@@ -15,15 +15,15 @@ jobs:
       run:
         working-directory: ./frontend
     steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
+      - uses: actions/checkout@v6
+      - uses: pnpm/action-setup@v6
         name: Install pnpm
         with:
           version: 9
           run_install: false
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
-          node-version: '18'
+          node-version: '23.9.0'
           cache: 'pnpm'
           cache-dependency-path: 'frontend/pnpm-lock.yaml'
       - name: Setup Biome
diff --git a/.github/workflows/global-terraform-deploy.yml b/.github/workflows/global-terraform-deploy.yml
index 216b85574a..37d28b1bd3 100644
--- a/.github/workflows/global-terraform-deploy.yml
+++ b/.github/workflows/global-terraform-deploy.yml
@@ -18,7 +18,7 @@ jobs:
       run:
         working-directory: ./infrastructure/global
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: hashicorp/setup-terraform@v3
         with:
           terraform_version: 1.2.4
diff --git a/.github/workflows/global-terraform-lint.yml b/.github/workflows/global-terraform-lint.yml
index c4cd7d798d..cba6aa24d9 100644
--- a/.github/workflows/global-terraform-lint.yml
+++ b/.github/workflows/global-terraform-lint.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-24.04
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: hashicorp/setup-terraform@v3
         with:
           terraform_version: 1.2.4
diff --git a/.github/workflows/opentofu-lint.yml b/.github/workflows/opentofu-lint.yml
index 1c7aada839..5528d43a19 100644
--- a/.github/workflows/opentofu-lint.yml
+++ b/.github/workflows/opentofu-lint.yml
@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-24.04
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: opentofu/setup-opentofu@v1
         with:
           tofu_version: 1.9.0
diff --git a/backend/Dockerfile b/backend/Dockerfile
index cc0169e4d7..8b3e37c761 100644
--- a/backend/Dockerfile
+++ b/backend/Dockerfile
@@ -88,6 +88,6 @@ COPY ./entrypoint.sh /entrypoint.sh
 
 RUN mkdir -p assets && .venv/bin/python manage.py collectstatic --noinput
 
-ENV PGSSLCERT /tmp/postgresql.crt
+ENV PGSSLCERT=/tmp/postgresql.crt
 
 ENTRYPOINT ["/entrypoint.sh"]
diff --git a/frontend/pnpm-workspace.yaml b/frontend/pnpm-workspace.yaml
index 4fbd0322fc..a64c6131fd 100644
--- a/frontend/pnpm-workspace.yaml
+++ b/frontend/pnpm-workspace.yaml
@@ -1,3 +1,5 @@
+packages:
+  - '.'
 allowBuilds:
   '@biomejs/biome': true
   '@sentry/cli': true