diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 47c56c4..5ce1010 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -10,7 +10,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6.0.2
       - uses: prefix-dev/setup-pixi@v0.9.6
         with:
           cache: true
@@ -21,7 +21,7 @@ jobs:
   typecheck:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6.0.2
       - uses: prefix-dev/setup-pixi@v0.9.6
         with:
           cache: true
@@ -39,7 +39,7 @@ jobs:
         os: [ubuntu-latest, macos-latest]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6.0.2
       - uses: prefix-dev/setup-pixi@v0.9.6
         with:
           cache: true
@@ -50,7 +50,7 @@ jobs:
   security:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6.0.2
       - uses: prefix-dev/setup-pixi@v0.9.6
         with:
           cache: true
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b3518c2..726e9ae 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,7 +12,7 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6.0.2
 
       - uses: prefix-dev/setup-pixi@v0.9.6
         with:
@@ -23,7 +23,7 @@ jobs:
         run: pixi run build
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           generate_release_notes: true
           files: dist/*
diff --git a/.github/workflows/update-lock-files.yml b/.github/workflows/update-lock-files.yml
index 9e2cd83..eb36e48 100644
--- a/.github/workflows/update-lock-files.yml
+++ b/.github/workflows/update-lock-files.yml
@@ -13,7 +13,7 @@ jobs:
   pixi-update:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6.0.2
       - name: Set up pixi
         uses: prefix-dev/setup-pixi@v0.9.6
         with:
@@ -23,7 +23,7 @@ jobs:
           set -o pipefail
           pixi update --json | pixi exec pixi-diff-to-markdown >> diff.md
       - name: Create pull request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           commit-message: Update pixi lock file