diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 6f1862c8..62b3f45e 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -2,17 +2,21 @@ name: Node.js CI
 
 on: [push]
 
+permissions: {}
+
 jobs:
   lint:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     strategy:
       matrix:
-        node-version: [22.x]
+        node-version: [24.x]
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
+      with:
+        persist-credentials: false
     - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6
       with:
         node-version: ${{ matrix.node-version }}
     - run: npm install
@@ -24,11 +28,13 @@ jobs:
     timeout-minutes: 10
     strategy:
       matrix:
-        node-version: [20.x, 22.x]
+        node-version: [20.x, 22.x, 24.x]
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
+      with:
+        persist-credentials: false
     - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6
       with:
         node-version: ${{ matrix.node-version }}
     - run: npm install
@@ -40,11 +46,13 @@ jobs:
     timeout-minutes: 10
     strategy:
       matrix:
-        node-version: [22.x]
+        node-version: [24.x]
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
+      with:
+        persist-credentials: false
     - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6
       with:
         node-version: ${{ matrix.node-version }}
     - run: npm install
@@ -56,18 +64,20 @@ jobs:
     timeout-minutes: 10
     strategy:
       matrix:
-        node-version: [22.x]
+        node-version: [24.x]
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
+      with:
+        persist-credentials: false
     - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6
       with:
         node-version: ${{ matrix.node-version }}
     - run: npm install
     - name: Generate coverage report
       run: npm run coverage-ci
     - name: Upload coverage to Codecov
-      uses: codecov/codecov-action@v4
+      uses: codecov/codecov-action@v5
       with:
         file: ./coverage/lcov.info
         fail_ci_if_error: true
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1982c2bb..c87709c7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,18 @@
 # @digitalbazaar/vc ChangeLog
 
+## 7.3.0 - 2026-02-xx
+
+### Changed
+- Update dependencies:
+  - `jsonld@9`.
+  - `jsonld-signatures@11.6.0`.
+- **NOTE**: The `jsonld` updates may have rare edge case compatibility issues.
+  The important related indirect `rdf-canonize` issues were addressed with
+  other existing minor version updates.
+
+### Fixed
+- Move `ed25519-signature-2018-context` to `devDependencies`.
+
 ## 7.2.0 - 2025-04-14
 
 ### Added
diff --git a/package.json b/package.json
index 2d8bcfa3..484f02cf 100644
--- a/package.json
+++ b/package.json
@@ -29,9 +29,8 @@
   ],
   "dependencies": {
     "@digitalbazaar/credentials-context": "^3.2.0",
-    "ed25519-signature-2018-context": "^1.1.0",
-    "jsonld": "^8.3.3",
-    "jsonld-signatures": "^11.5.0"
+    "jsonld": "^9.0.0",
+    "jsonld-signatures": "^11.6.0"
   },
   "devDependencies": {
     "@digitalbazaar/bbs-2023-cryptosuite": "^2.0.1",
@@ -43,9 +42,9 @@
     "@digitalbazaar/did-method-key": "^5.2.0",
     "@digitalbazaar/did-method-web": "^1.0.1",
     "@digitalbazaar/ecdsa-multikey": "^1.8.0",
-    "@digitalbazaar/ecdsa-rdfc-2019-cryptosuite": "^1.2.0",
+    "@digitalbazaar/ecdsa-rdfc-2019-cryptosuite": "^1.3.0",
     "@digitalbazaar/ecdsa-sd-2023-cryptosuite": "^3.4.1",
-    "@digitalbazaar/ed25519-signature-2018": "^4.1.0",
+    "@digitalbazaar/ed25519-signature-2018": "^4.2.0",
     "@digitalbazaar/ed25519-verification-key-2018": "^4.0.0",
     "@digitalbazaar/multikey-context": "^2.0.1",
     "@digitalbazaar/odrl-context": "^1.0.0",
@@ -55,6 +54,7 @@
     "cross-env": "^7.0.3",
     "did-context": "^3.1.1",
     "did-veres-one": "^16.1.1",
+    "ed25519-signature-2018-context": "^1.1.0",
     "eslint": "^8.57.1",
     "eslint-config-digitalbazaar": "^5.2.0",
     "eslint-plugin-jsdoc": "^50.6.8",