diff --git a/.github/workflows/buildwheel.yml b/.github/workflows/buildwheel.yml
index a70c318c..6d24ee90 100644
--- a/.github/workflows/buildwheel.yml
+++ b/.github/workflows/buildwheel.yml
@@ -107,17 +107,17 @@ jobs:
             cibw_config_settings: "setup-args=-Dpython.allow_limited_api=true"
 
           - name: Build macOS arm64 wheels
-            os: macos-14
+            os: macos-15
             kind: native
-            artifact_name: wheels-macos-14
+            artifact_name: wheels-macos-15
             cibw_platform: auto
             cibw_build: "cp313-* cp314-* cp314t-* pp311-*"
             cibw_config_settings: ""
 
           - name: Build macOS arm64 stable ABI wheels
-            os: macos-14
+            os: macos-15
             kind: stable-abi
-            artifact_name: wheels-macos-14-abi3
+            artifact_name: wheels-macos-15-abi3
             cibw_platform: auto
             cibw_build: "cp310-*"
             cibw_config_settings: "setup-args=-Dpython.allow_limited_api=true"
@@ -184,7 +184,7 @@ jobs:
 
       - name: Build wheels
         # Temporarily pin the latest commit of cibuildwheel for PyPy 8.0.0 support
-        uses: pypa/cibuildwheel@5cad3d982fd4fbcddade622709b995e3052923b1 # zizmor: ignore[stale-action-refs]
+        uses: pypa/cibuildwheel@9d8f70c892d62a44ff0d6f6ae97586a65caa4aa0 # zizmor: ignore[stale-action-refs]
         env:
           CIBW_PLATFORM: ${{ matrix.cibw_platform }}
           CIBW_BUILD: ${{ matrix.cibw_build }}
@@ -236,7 +236,6 @@ jobs:
           windows-2025,
           windows-11-arm,
           macos-15-intel,
-          macos-14,
           macos-15,
           ]
         # This list to be kept in sync with python-requires in pyproject.toml.
@@ -555,7 +554,7 @@ jobs:
         # It is recommended to pin a commit hash here for security but it
         # should be kept up to date. Possibly all actions and dependencies used
         # by the build script should be pinned...
-        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33  # v1.14.2
+        uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086  # v1.14.3
 
   # Make a GitHub release