diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1fd22dd..367585e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v5.0.0
+      - uses: actions/checkout@v6.0.0
 
       - name: repo review
         uses: scientific-python/repo-review@v0.12.3
@@ -32,9 +32,9 @@ jobs:
         uses: dprint/check@v2.3
 
       - name: typos
-        uses: crate-ci/typos@v1.39.0
+        uses: crate-ci/typos@v1.39.2
 
-      - uses: astral-sh/setup-uv@v7.1.3
+      - uses: astral-sh/setup-uv@v7.1.4
         with:
           python-version: "3.14"
 
@@ -64,9 +64,9 @@ jobs:
           - py: "3.14"
             np: "2.3"
     steps:
-      - uses: actions/checkout@v5.0.0
+      - uses: actions/checkout@v6.0.0
 
-      - uses: astral-sh/setup-uv@v7.1.3
+      - uses: astral-sh/setup-uv@v7.1.4
         with:
           activate-environment: true
           python-version: ${{ matrix.py }}
@@ -109,9 +109,9 @@ jobs:
           - py: "3.14"
             np: "2.0"
     steps:
-      - uses: actions/checkout@v5.0.0
+      - uses: actions/checkout@v6.0.0
 
-      - uses: astral-sh/setup-uv@v7.1.3
+      - uses: astral-sh/setup-uv@v7.1.4
         with:
           python-version: ${{ matrix.py }}
 
diff --git a/.github/workflows/publish-pypi.yml b/.github/workflows/publish-pypi.yml
index a918322..6ff0e8f 100644
--- a/.github/workflows/publish-pypi.yml
+++ b/.github/workflows/publish-pypi.yml
@@ -19,9 +19,9 @@ jobs:
     permissions:
       id-token: write
     steps:
-      - uses: actions/checkout@v5.0.0
+      - uses: actions/checkout@v6.0.0
 
-      - uses: astral-sh/setup-uv@v7.1.3
+      - uses: astral-sh/setup-uv@v7.1.4
         with:
           python-version: "3.14"