diff --git a/.editorconfig b/.editorconfig
index 7a5b361..042543e 100644
--- a/.editorconfig
+++ b/.editorconfig
@@ -30,7 +30,9 @@ dotnet_diagnostic.CA1305.severity = none
 dotnet_diagnostic.CA1822.severity = suggestion
 dotnet_diagnostic.CA1859.severity = suggestion
 
-[JianpuEditor.Tests/**/*.cs]
-# xUnit test naming and inline test data arrays
+[JianpuEditor.Tests/{*.cs,**/*.cs}]
+# xUnit test naming and inline test data arrays. Note: "**/*.cs" alone only matches files in a
+# subdirectory (an EditorConfig glob quirk) -- it silently skipped every *.cs file directly under
+# JianpuEditor.Tests/ (e.g. MainFormMultiTabTests.cs), which is why CA1707 kept firing for those.
 dotnet_diagnostic.CA1707.severity = none
 dotnet_diagnostic.CA1861.severity = none
\ No newline at end of file
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f987381..78b0900 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,10 +14,10 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup .NET SDK
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v6
         with:
           dotnet-version: 8.0.x
           cache: true
@@ -26,7 +26,7 @@ jobs:
             **/*.csproj
 
       - name: Cache .NET build outputs
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: |
             JianpuEditor/obj
@@ -56,7 +56,7 @@ jobs:
         run: ./scripts/test-midi-export.ps1
 
       - name: Upload Release build
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: JianpuEditor-${{ github.sha }}
           path: |
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1bda62d..c715b2b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Resolve version
         id: version
@@ -47,7 +47,7 @@ jobs:
           Set-Content -Path $iss -Value $content -NoNewline
 
       - name: Setup .NET SDK
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v6
         with:
           dotnet-version: 8.0.x
           cache: true
@@ -56,7 +56,7 @@ jobs:
             **/*.csproj
 
       - name: Cache .NET build outputs
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: |
             JianpuEditor/obj
@@ -125,7 +125,7 @@ jobs:
           Write-Host "Portable package: $zip ($([math]::Round((Get-Item $zip).Length / 1MB, 2)) MB)"
 
       - name: Upload installer artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: JianpuEditor-Setup-${{ steps.version.outputs.value }}
           path: |
@@ -135,7 +135,7 @@ jobs:
           retention-days: 90
 
       - name: Upload portable artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: JianpuEditor-Portable-${{ steps.version.outputs.value }}
           path: ${{ steps.portable.outputs.zip }}