diff --git a/.github/workflows/pub-pypi.yml b/.github/workflows/pub-pypi.yml
index dea82b7e..d2ff0432 100644
--- a/.github/workflows/pub-pypi.yml
+++ b/.github/workflows/pub-pypi.yml
@@ -8,10 +8,10 @@ jobs:
     name: Build and publish Python distributions to PyPI
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@master
+    - uses: actions/checkout@v7
 
     - name: Set up Python 3.10
-      uses: actions/setup-python@master
+      uses: actions/setup-python@v6
       with:
         python-version: "3.10"
 
@@ -33,6 +33,6 @@ jobs:
 
     - name: Publish distribution to PyPI
       if: startsWith(github.ref, 'refs/tags')
-      uses: pypa/gh-action-pypi-publish@master
+      uses: pypa/gh-action-pypi-publish@v1.14.0
       with:
         password: ${{ secrets.PYPI_API_TOKEN }}
diff --git a/.github/workflows/pyright.yml b/.github/workflows/pyright.yml
index cebe2b60..78477a35 100644
--- a/.github/workflows/pyright.yml
+++ b/.github/workflows/pyright.yml
@@ -8,7 +8,7 @@ jobs:
     name: pyright
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@master
+    - uses: actions/checkout@v7
     - uses: actions/setup-python@v6
       with:
         python-version: '3.12'