diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 37f465a..45e3e15 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -27,13 +27,13 @@ jobs:
       with:
         python-version: 3.12
     - name: Set up Python environment
-      uses: glotzerlab/workflows/setup-uv@1747bc5c994ec280440dd051f2928791407692c8 # 0.5.1
+      uses: glotzerlab/workflows/setup-uv@a36a97114c60241b26217ce92abbb64621ac67c7 # 0.6.0
       with:
         lockfile: ".github/workflows/environments/requirements-build.txt"
     - name: Build wheel
       run: python3 -m build --outdir dist/ .
 
-    - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+    - uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
       with:
         name: dist
         path: dist
@@ -57,4 +57,4 @@ jobs:
 
       - name: Upload to PyPI
         if: startsWith(github.ref, 'refs/tags/v')
-        uses: pypa/gh-action-pypi-publish@15c56dba361d8335944d31a2ecd17d700fc7bcbc # v1.12.2
+        uses: pypa/gh-action-pypi-publish@67339c736fd9354cd4f8cb0b744f2b82a74b5c70 # v1.12.3
diff --git a/.github/workflows/unit_test.yaml b/.github/workflows/unit_test.yaml
index 086c2c4..de4d730 100644
--- a/.github/workflows/unit_test.yaml
+++ b/.github/workflows/unit_test.yaml
@@ -34,7 +34,7 @@ jobs:
       with:
         python-version: ${{ matrix.python }}
     - name: Set up Python environment
-      uses: glotzerlab/workflows/setup-uv@1747bc5c994ec280440dd051f2928791407692c8 # 0.5.1
+      uses: glotzerlab/workflows/setup-uv@a36a97114c60241b26217ce92abbb64621ac67c7 # 0.6.0
       with:
         lockfile: ".github/workflows/environments/requirements-test-${{matrix.python}}.txt"
     - name: Run tests
diff --git a/.github/workflows/update-uv-lockfiles.yaml b/.github/workflows/update-uv-lockfiles.yaml
index 8501a03..21d3b08 100644
--- a/.github/workflows/update-uv-lockfiles.yaml
+++ b/.github/workflows/update-uv-lockfiles.yaml
@@ -8,7 +8,7 @@ on:
 
 jobs:
   update:
-    uses: glotzerlab/workflows/.github/workflows/update-uv-lockfiles.yaml@1747bc5c994ec280440dd051f2928791407692c8 # 0.5.1
+    uses: glotzerlab/workflows/.github/workflows/update-uv-lockfiles.yaml@a36a97114c60241b26217ce92abbb64621ac67c7 # 0.6.0
     secrets: inherit
     with:
       branch: master