diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 00000000..697b7310
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1 @@
+* @hannahro15 @v-gajjar @NickTheDevOpsGuy
diff --git a/.github/workflows/Phuzzle.yml b/.github/workflows/Phuzzle.yml
index 8cabc458..f7c759d1 100644
--- a/.github/workflows/Phuzzle.yml
+++ b/.github/workflows/Phuzzle.yml
@@ -3,8 +3,10 @@ name: 🧩 Phuzzle
 
 on:
   pull_request:
+    types: [opened, synchronize, reopened, ready_for_review]
     branches:
       - develop
+  workflow_dispatch:
 
 concurrency:
   group: Phuzzle-${{ github.ref }}
@@ -59,7 +61,7 @@ jobs:
 
       - name: 📦 Bundle size check
         env:
-          BASELINE_REF: origin/${{ github.base_ref }}
+          BASELINE_REF: origin/${{ github.base_ref || 'develop' }}
           CHECK_BUNDLE_USE_EXISTING_DIST: "1"
         run: npm run check:bundle
 
@@ -67,7 +69,7 @@ jobs:
         run: npm run test
 
       - name: 📤 Upload production build
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: phuzzle-dist
           path: dist
@@ -92,7 +94,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: 🧰 Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v6.4.0
         with:
           node-version: "24"
           cache: npm
@@ -102,7 +104,7 @@ jobs:
         run: npm ci
 
       - name: 📥 Download production build
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@v7
         with:
           name: phuzzle-dist
           path: dist
@@ -115,7 +117,7 @@ jobs:
 
       - name: 📤 Upload Playwright artifacts
         if: failure()
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: playwright-smoke-artifacts
           path: |
@@ -141,7 +143,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: 🧰 Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v6.4.0
         with:
           node-version: "24"
           cache: npm
@@ -151,7 +153,7 @@ jobs:
         run: npm ci
 
       - name: 📥 Download production build
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@v7
         with:
           name: phuzzle-dist
           path: dist
@@ -164,7 +166,7 @@ jobs:
 
       - name: 📤 Upload Playwright artifacts
         if: failure()
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: playwright-layout-artifacts
           path: |
@@ -194,7 +196,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: 🧰 Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v6.4.0
         with:
           node-version: "24"
           cache: npm
@@ -204,7 +206,7 @@ jobs:
         run: npm ci
 
       - name: 📥 Download production build
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@v7
         with:
           name: phuzzle-dist
           path: dist
@@ -216,7 +218,7 @@ jobs:
 
       - name: 📤 Upload Lighthouse reports
         if: always()
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: lhci-reports
           path: lhci-reports
diff --git a/.github/workflows/renovate-lockfile-pr.yml b/.github/workflows/renovate-lockfile-pr.yml
index 5379b3be..e15a670b 100644
--- a/.github/workflows/renovate-lockfile-pr.yml
+++ b/.github/workflows/renovate-lockfile-pr.yml
@@ -17,7 +17,7 @@ jobs:
       false
     runs-on: ubuntu-latest
     env:
-      # Opt into Node.js 24 for JavaScript actions (actions/checkout, actions/setup-node)
+      # Opt into Node.js 24 for JavaScript actions.
       FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"
 
     steps:
@@ -27,7 +27,7 @@ jobs:
           fetch-depth: 0
 
       - name: 🧰 Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v6.4.0
         with:
           node-version: "24"
           cache: "npm"
diff --git a/.github/workflows/renovate-patch-automerge.yml b/.github/workflows/renovate-patch-automerge.yml
index d902f4e9..828c9e0c 100644
--- a/.github/workflows/renovate-patch-automerge.yml
+++ b/.github/workflows/renovate-patch-automerge.yml
@@ -6,6 +6,7 @@ on:
   pull_request_target:
     types: [opened, synchronize, reopened, ready_for_review, labeled]
     branches: [develop]
+  workflow_dispatch:
 
 permissions:
   contents: write