diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 35ab769..710ab7c 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -94,7 +94,7 @@ jobs:
         run: uv run pytest --verbose --junit-xml=tests/coverage.xml
 
       - name: Upload test reports
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: test-reports-${{ env.REVISION }}
           path: tests/coverage.xml
@@ -137,7 +137,7 @@ jobs:
         run: SETUPTOOLS_SCM_PRETEND_VERSION=${REVISION} uv run python -m build --outdir dist
 
       - name: Upload build artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: dist-${{ env.REVISION }}
           path: dist/
diff --git a/.github/workflows/container.yml b/.github/workflows/container.yml
index 6455de8..ba0b7cb 100644
--- a/.github/workflows/container.yml
+++ b/.github/workflows/container.yml
@@ -65,7 +65,7 @@ jobs:
           labels: ${{ steps.meta.outputs.labels }}
 
       - name: Generate artifact attestation
-        uses: actions/attest-build-provenance@v3
+        uses: actions/attest-build-provenance@v4
         with:
           subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           subject-digest: ${{ steps.push.outputs.digest }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0fb252e..a464d36 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -35,7 +35,7 @@ jobs:
           fetch-depth: 0
 
       - name: Download build artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           pattern: dist-*
           path: dist