diff --git a/.github/workflows/benches.yml b/.github/workflows/benches.yml
index 4a1c9e2d42..ca420d7069 100644
--- a/.github/workflows/benches.yml
+++ b/.github/workflows/benches.yml
@@ -25,7 +25,7 @@ jobs:
           - windows-latest
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - uses: dtolnay/rust-toolchain@stable
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 39cb9680bd..9dffc88755 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -48,7 +48,7 @@ jobs:
           - release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v7
       # Install the required target
       - uses: dtolnay/rust-toolchain@stable
         with:
diff --git a/.github/workflows/build_test_workspace.yml b/.github/workflows/build_test_workspace.yml
index 59a369b875..343b9ec7da 100644
--- a/.github/workflows/build_test_workspace.yml
+++ b/.github/workflows/build_test_workspace.yml
@@ -30,7 +30,7 @@ jobs:
       - name: Install dependencies
         if: matrix.os == 'macos-latest'
         run: brew install protobuf
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v7
       - uses: dtolnay/rust-toolchain@stable
       - uses: Swatinem/rust-cache@v2
       - name: Build workspace
diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
index 6aad196ed0..0fc3622815 100644
--- a/.github/workflows/checks.yml
+++ b/.github/workflows/checks.yml
@@ -17,7 +17,7 @@ jobs:
   checks:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - uses: dtolnay/rust-toolchain@stable
diff --git a/.github/workflows/clippy.yml b/.github/workflows/clippy.yml
index c5fbab1732..31d6b39db5 100644
--- a/.github/workflows/clippy.yml
+++ b/.github/workflows/clippy.yml
@@ -11,7 +11,7 @@ jobs:
   clippy_check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v7
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: clippy
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index aeed1b73ca..5d48818674 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v7
         with:
           submodules: true
       - uses: dtolnay/rust-toolchain@nightly
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 89e53f65a7..3ac55779de 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -14,7 +14,7 @@ jobs:
   checks:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v7
       - uses: dtolnay/rust-toolchain@stable
       - uses: Swatinem/rust-cache@v2
       - run: cargo doc -p openmls
diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml
index 5570f31fdf..4cd44e553b 100644
--- a/.github/workflows/fuzz.yml
+++ b/.github/workflows/fuzz.yml
@@ -30,7 +30,7 @@ jobs:
             runs: 50000
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v7
       - uses: dtolnay/rust-toolchain@master
         with:
           toolchain: nightly
diff --git a/.github/workflows/gh-pages.yml b/.github/workflows/gh-pages.yml
index 1fcc69e7c1..62d53b5378 100644
--- a/.github/workflows/gh-pages.yml
+++ b/.github/workflows/gh-pages.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: hecrj/setup-rust-action@master
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v7
       - uses: dtolnay/rust-toolchain@stable
       - uses: Swatinem/rust-cache@v2
       - name: Setup mdBook
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index eaa275efee..4c52501810 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -28,7 +28,7 @@ jobs:
           - release
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - uses: dtolnay/rust-toolchain@stable
diff --git a/openmls/src/framing/test_framing.rs b/openmls/src/framing/test_framing.rs
index 3cc24c0a51..d3b70a0f37 100644
--- a/openmls/src/framing/test_framing.rs
+++ b/openmls/src/framing/test_framing.rs
@@ -1,9 +1,6 @@
 use openmls_basic_credential::SignatureKeyPair;
 use openmls_traits::{random::OpenMlsRand, types::Ciphersuite, OpenMlsCryptoProvider};
 
-use rstest::*;
-use rstest_reuse::{self, *};
-
 use openmls_rust_crypto::OpenMlsRustCrypto;
 use signable::Verifiable;
 use tls_codec::{Deserialize, Serialize};
diff --git a/openmls/src/group/public_group/tests.rs b/openmls/src/group/public_group/tests.rs
index 523da01b33..c10c421eb4 100644
--- a/openmls/src/group/public_group/tests.rs
+++ b/openmls/src/group/public_group/tests.rs
@@ -1,7 +1,5 @@
 use openmls_rust_crypto::OpenMlsRustCrypto;
 use openmls_traits::{types::Ciphersuite, OpenMlsCryptoProvider};
-use rstest::*;
-use rstest_reuse::{self, *};
 
 use crate::{
     binary_tree::LeafNodeIndex,
diff --git a/openmls/src/group/tests/external_add_proposal.rs b/openmls/src/group/tests/external_add_proposal.rs
index e55b438742..1b1baba7d5 100644
--- a/openmls/src/group/tests/external_add_proposal.rs
+++ b/openmls/src/group/tests/external_add_proposal.rs
@@ -1,7 +1,5 @@
 use openmls_basic_credential::SignatureKeyPair;
 use openmls_rust_crypto::OpenMlsRustCrypto;
-use rstest::*;
-use rstest_reuse::{self, *};
 
 use crate::{
     binary_tree::LeafNodeIndex,
diff --git a/openmls/src/group/tests/external_remove_proposal.rs b/openmls/src/group/tests/external_remove_proposal.rs
index 0887a961eb..6ec7dbbcd2 100644
--- a/openmls/src/group/tests/external_remove_proposal.rs
+++ b/openmls/src/group/tests/external_remove_proposal.rs
@@ -1,6 +1,4 @@
 use openmls_rust_crypto::OpenMlsRustCrypto;
-use rstest::*;
-use rstest_reuse::{self, *};
 
 use crate::{
     framing::*,
diff --git a/openmls/src/group/tests/test_commit_validation.rs b/openmls/src/group/tests/test_commit_validation.rs
index 5aa4d0e78a..fa559b507d 100644
--- a/openmls/src/group/tests/test_commit_validation.rs
+++ b/openmls/src/group/tests/test_commit_validation.rs
@@ -3,8 +3,6 @@
 
 use openmls_rust_crypto::OpenMlsRustCrypto;
 use openmls_traits::{signatures::Signer, types::Ciphersuite};
-use rstest::*;
-use rstest_reuse::{self, *};
 use tls_codec::{Deserialize, Serialize};
 
 use super::utils::{
diff --git a/openmls/src/group/tests/test_framing.rs b/openmls/src/group/tests/test_framing.rs
index aaa42ad9d0..01bbf863f2 100644
--- a/openmls/src/group/tests/test_framing.rs
+++ b/openmls/src/group/tests/test_framing.rs
@@ -4,8 +4,6 @@ use itertools::iproduct;
 use openmls_traits::{
     crypto::OpenMlsCrypto, random::OpenMlsRand, types::Ciphersuite, OpenMlsCryptoProvider,
 };
-use rstest::*;
-use rstest_reuse::{self, *};
 use tls_codec::Serialize;
 
 use super::utils::*;
diff --git a/openmls/src/group/tests/test_framing_validation.rs b/openmls/src/group/tests/test_framing_validation.rs
index 556c5c5f22..98e612f26e 100644
--- a/openmls/src/group/tests/test_framing_validation.rs
+++ b/openmls/src/group/tests/test_framing_validation.rs
@@ -5,9 +5,6 @@ use openmls_rust_crypto::OpenMlsRustCrypto;
 use openmls_traits::{types::Ciphersuite, OpenMlsCryptoProvider};
 use tls_codec::{Deserialize, Serialize};
 
-use rstest::*;
-use rstest_reuse::{self, *};
-
 use crate::{
     binary_tree::LeafNodeIndex,
     framing::*,
diff --git a/openmls/src/group/tests/test_proposal_validation.rs b/openmls/src/group/tests/test_proposal_validation.rs
index 715614050f..0af09d5cce 100644
--- a/openmls/src/group/tests/test_proposal_validation.rs
+++ b/openmls/src/group/tests/test_proposal_validation.rs
@@ -6,8 +6,6 @@ use openmls_traits::types::SignatureScheme;
 use openmls_traits::{
     key_store::OpenMlsKeyStore, signatures::Signer, types::Ciphersuite, OpenMlsCryptoProvider,
 };
-use rstest::*;
-use rstest_reuse::{self, *};
 use tls_codec::{Deserialize, Serialize};
 
 use super::utils::{
diff --git a/openmls/src/group/tests/test_wire_format_policy.rs b/openmls/src/group/tests/test_wire_format_policy.rs
index dd1d2f1713..590bcae7bf 100644
--- a/openmls/src/group/tests/test_wire_format_policy.rs
+++ b/openmls/src/group/tests/test_wire_format_policy.rs
@@ -3,9 +3,6 @@
 use openmls_rust_crypto::OpenMlsRustCrypto;
 use openmls_traits::{signatures::Signer, types::Ciphersuite, OpenMlsCryptoProvider};
 
-use rstest::*;
-use rstest_reuse::{self, *};
-
 use crate::test_utils::*;
 use crate::{
     framing::*,
diff --git a/openmls/src/tree/sender_ratchet.rs b/openmls/src/tree/sender_ratchet.rs
index b2ea670f2d..d2ce96e8f7 100644
--- a/openmls/src/tree/sender_ratchet.rs
+++ b/openmls/src/tree/sender_ratchet.rs
@@ -9,7 +9,7 @@ use std::collections::VecDeque;
 
 use openmls_traits::types::Ciphersuite;
 
-use crate::ciphersuite::{AeadNonce, *};
+use crate::ciphersuite::AeadNonce;
 use crate::tree::secret_tree::*;
 
 use super::*;
diff --git a/openmls/src/treesync/mod.rs b/openmls/src/treesync/mod.rs
index 3722d4b440..4b7f6a099d 100644
--- a/openmls/src/treesync/mod.rs
+++ b/openmls/src/treesync/mod.rs
@@ -19,10 +19,6 @@
 // Finally, this module contains the [`treekem`] module, which allows the
 // encryption and decryption of updates to the tree.
 
-#[cfg(test)]
-use openmls_rust_crypto::OpenMlsRustCrypto;
-#[cfg(test)]
-use rstest::*;
 #[cfg(test)]
 use rstest_reuse::apply;
 
diff --git a/openmls/src/treesync/tests_and_kats/tests/test_diff.rs b/openmls/src/treesync/tests_and_kats/tests/test_diff.rs
index 1481fb0f12..a5405fdbf7 100644
--- a/openmls/src/treesync/tests_and_kats/tests/test_diff.rs
+++ b/openmls/src/treesync/tests_and_kats/tests/test_diff.rs
@@ -1,6 +1,5 @@
 use openmls_rust_crypto::OpenMlsRustCrypto;
 use openmls_traits::{types::Ciphersuite, OpenMlsCryptoProvider};
-use rstest::*;
 use rstest_reuse::apply;
 
 use crate::prelude::GroupId;