diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 37262035..9f600711 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -8,9 +8,16 @@ jobs:
     runs-on: macos-26
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
         with:
-          submodules: 'true'
+          submodules: 'recursive'
+          persist-credentials: false
+
+      - name: Pull Git LFS assets for IDeviceKitten
+        run: |
+          git config --global --unset-all http.https://github.com/.extraheader || true
+          git -C IDeviceKitten config --unset-all http.https://github.com/.extraheader || true
+          git -C IDeviceKitten lfs pull
       
       - name: Use Xcode 26.2
         run: |
diff --git a/.github/workflows/update_repo.yml b/.github/workflows/update_repo.yml
index 775a67c7..de2682b2 100644
--- a/.github/workflows/update_repo.yml
+++ b/.github/workflows/update_repo.yml
@@ -9,14 +9,14 @@ jobs:
     runs-on: macos-15
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
 
       - name: Update app-repo.json
         run: |
           ./update-repo.sh
 
       - name: Commit changes
-        uses: EndBug/add-and-commit@v9
+        uses: EndBug/add-and-commit@v10
         with:
           default_author: github_actions
           message: "chore: update repo"
diff --git a/.gitmodules b/.gitmodules
index bcacb169..86ff3ddd 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -1,7 +1,7 @@
 [submodule "Zsign"]
 	path = Zsign
-	url = https://github.com/khcrysalis/Zsign-Package
+	url = https://github.com/CLARATION/Zsign-Package
 	branch = package
 [submodule "IDeviceKitten"]
 	path = IDeviceKitten
-	url = https://github.com/khcrysalis/IDeviceKit
+	url = https://github.com/CLARATION/IDeviceKit