diff --git a/.github/workflows/build-installers.yml b/.github/workflows/build-installers.yml
index 6b3f63cb..60b5e847 100644
--- a/.github/workflows/build-installers.yml
+++ b/.github/workflows/build-installers.yml
@@ -47,7 +47,7 @@ jobs:
           - { os: macos-15-intel, plat: macOS,   arch: x86_64 }
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0          # setuptools-scm needs full history + tags
 
@@ -113,7 +113,7 @@ jobs:
           ARCH="${{ matrix.arch }}" bash packaging/macos/make_dmg.sh
           mv PyReconstruct-*.dmg dist-assets/
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: installer-${{ matrix.plat }}-${{ matrix.arch }}
           path: dist-assets/*
@@ -127,10 +127,10 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v4          # needed for packaging/linux/ + release notes
+      - uses: actions/checkout@v7          # needed for packaging/linux/ + release notes
         with:
           fetch-depth: 0                   # full history + tags for the changelog link
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           path: dist
           merge-multiple: true
@@ -173,7 +173,7 @@ jobs:
             fi
           } > release_body.md
           echo "----- release_body.md -----"; cat release_body.md
-      - uses: softprops/action-gh-release@v2
+      - uses: softprops/action-gh-release@v3
         with:
           files: dist/*
           prerelease: false
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 80c4bcbc..368c42ff 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-python@v7
         with:
@@ -61,7 +61,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     timeout-minutes: 30   # headroom for the cold wheel install (vtk/scipy/PySide6/...)
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-python@v7
         with:
@@ -117,7 +117,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-python@v7
         with:
diff --git a/.github/workflows/dependabot-auto.yml b/.github/workflows/dependabot-auto.yml
index 6a429fb1..5630dd4e 100644
--- a/.github/workflows/dependabot-auto.yml
+++ b/.github/workflows/dependabot-auto.yml
@@ -19,7 +19,7 @@ jobs:
     steps:
       - name: read the update type
         id: meta
-        uses: dependabot/fetch-metadata@v2
+        uses: dependabot/fetch-metadata@v3
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}