diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index df93d7a..8507949 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -23,7 +23,7 @@ jobs:
     - uses: actions/checkout@v7
 
     - name: Build and Check Package
-      uses: hynek/build-and-inspect-python-package@v2.18.0
+      uses: hynek/build-and-inspect-python-package@v3.0.1
       with:
         attest-build-provenance-github: 'true'
 
@@ -46,7 +46,7 @@ jobs:
         path: dist
 
     - name: Publish package to PyPI
-      uses: pypa/gh-action-pypi-publish@v1.14.0
+      uses: pypa/gh-action-pypi-publish@v1.14.2
       with:
         attestations: true
 
@@ -58,7 +58,7 @@ jobs:
         git push origin v${{ github.event.inputs.version }}
 
     - name: Set up Python
-      uses: actions/setup-python@v6
+      uses: actions/setup-python@v7
       with:
         python-version: "3.10"
 
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index b583d69..6fb57df 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -23,7 +23,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
       - name: Build and Check Package
-        uses: hynek/build-and-inspect-python-package@v2.18.0
+        uses: hynek/build-and-inspect-python-package@v3.0.1
         with:
           # Disabling because this is failing currently, see #466.
           attest-build-provenance-github: 'false'
@@ -61,7 +61,7 @@ jobs:
         path: dist
 
     - name: Set up Python
-      uses: actions/setup-python@v6
+      uses: actions/setup-python@v7
       with:
         python-version: ${{ matrix.python }}
         allow-prereleases: true