diff --git a/.github/workflows/generate-sdist.yml b/.github/workflows/generate-sdist.yml
index 8754786..6894655 100644
--- a/.github/workflows/generate-sdist.yml
+++ b/.github/workflows/generate-sdist.yml
@@ -20,7 +20,7 @@ jobs:
     name: Build source distribution
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0  # such that setuptools_scm can do its job correctly
 
@@ -50,7 +50,7 @@ jobs:
           pipx install uv
           pipx run build --verbose --sdist --installer=uv
 
-      - uses: actions/upload-artifact@v5
+      - uses: actions/upload-artifact@v6
         with:
           name: cibw-sdist
           path: dist/*.tar.gz
diff --git a/.github/workflows/update-pixi-lockfile.yml b/.github/workflows/update-pixi-lockfile.yml
index 3342b1e..a405aa0 100644
--- a/.github/workflows/update-pixi-lockfile.yml
+++ b/.github/workflows/update-pixi-lockfile.yml
@@ -7,9 +7,9 @@ jobs:
   pixi-update:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Set up pixi
-        uses: prefix-dev/setup-pixi@v0.9.2
+        uses: prefix-dev/setup-pixi@v0.9.3
         with:
           run-install: false
       - name: Update lockfiles
@@ -17,7 +17,7 @@ jobs:
           set -o pipefail
           pixi update --json | pixi exec pixi-diff-to-markdown > diff.md
       - name: Create pull request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           commit-message: "chore(lock): :lock: update pixi lockfile"
diff --git a/.github/workflows/upload-to-aws-codeartifact.yml b/.github/workflows/upload-to-aws-codeartifact.yml
index 7571b72..44d026f 100644
--- a/.github/workflows/upload-to-aws-codeartifact.yml
+++ b/.github/workflows/upload-to-aws-codeartifact.yml
@@ -19,7 +19,7 @@ jobs:
     name: Upload to AWS CodeArtifact
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/download-artifact@v6
+      - uses: actions/download-artifact@v7
         with:
           # unpacks all CIBW artifacts into dist/
           pattern: cibw-*