diff --git a/.github/workflows/bench.yml b/.github/workflows/bench.yml
index 69d11601..5e418191 100644
--- a/.github/workflows/bench.yml
+++ b/.github/workflows/bench.yml
@@ -36,7 +36,7 @@ jobs:
         run: cargo codspeed build
 
       - name: Run the benchmarks
-        uses: CodSpeedHQ/action@346a2d8a8d9d38909abd0bc3d23f773110f076ad
+        uses: CodSpeedHQ/action@972e3437949c89e1357ebd1a2dbc852fcbc57245
         with:
           mode: instrumentation
           run: cargo codspeed run
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index e49bd136..11d901de 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -84,7 +84,7 @@ jobs:
 
       - name: Cache rustup toolchain
         if: ${{ !startsWith(github.ref, 'refs/tags/') }}
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.rustup
@@ -94,7 +94,7 @@ jobs:
 
       - name: Cache Homebrew packages (macOS)
         if: ${{ !startsWith(github.ref, 'refs/tags/') && runner.os == 'macOS' }}
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/Library/Caches/Homebrew
@@ -110,7 +110,7 @@ jobs:
       - name: Cache Zig toolchain
         if: ${{ !startsWith(github.ref, 'refs/tags/') && runner.os == 'Linux' && matrix.platform.target == 'aarch64' }}
         id: cache-zig
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             zig-linux-x86_64-${{ env.ZIG_VERSION }}
@@ -199,7 +199,7 @@ jobs:
           echo "ARTIFACT_PATH=${ARCHIVE}.tar.gz*" >> $GITHUB_ENV
 
       - name: Upload binary
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: binary-${{ env.OS }}-${{ env.ARCH }}
           path: ${{ env.ARTIFACT_PATH }}
@@ -231,7 +231,7 @@ jobs:
           manylinux: auto
 
       - name: Upload wheels
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: wheels-linux-${{ matrix.platform.target }}
           path: dist
@@ -263,7 +263,7 @@ jobs:
           manylinux: musllinux_1_2
 
       - name: Upload wheels
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: wheels-musllinux-${{ matrix.platform.target }}
           path: dist
@@ -287,7 +287,7 @@ jobs:
 
       - name: Cache rustup toolchain
         if: ${{ !startsWith(github.ref, 'refs/tags/') }}
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.rustup
@@ -297,7 +297,7 @@ jobs:
 
       - name: Cache Cargo registry
         if: ${{ !startsWith(github.ref, 'refs/tags/') }}
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.cargo/git
@@ -315,7 +315,7 @@ jobs:
           sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
 
       - name: Upload wheels
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: wheels-windows-${{ matrix.platform.target }}
           path: dist
@@ -340,7 +340,7 @@ jobs:
 
       - name: Cache rustup toolchain
         if: ${{ !startsWith(github.ref, 'refs/tags/') }}
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.rustup
@@ -350,7 +350,7 @@ jobs:
 
       - name: Cache Cargo registry
         if: ${{ !startsWith(github.ref, 'refs/tags/') }}
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.cargo/git
@@ -368,7 +368,7 @@ jobs:
           sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
 
       - name: Upload wheels
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: wheels-macos-${{ matrix.platform.target }}
           path: dist
@@ -387,7 +387,7 @@ jobs:
           args: --out dist
 
       - name: Upload sdist
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: wheels-sdist
           path: dist
@@ -400,7 +400,7 @@ jobs:
       id-token: write
       attestations: write
     steps:
-      - uses: actions/download-artifact@v6
+      - uses: actions/download-artifact@v7
 
       - name: Generate artifact attestation
         uses: actions/attest-build-provenance@v3
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index da6f7951..6c18e125 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -27,7 +27,7 @@ jobs:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@ed21f2f24f8dd64503750218de024bcf64c7250a
+        uses: astral-sh/setup-uv@681c641aba71e4a1c380be3ab5e12ad51f415867
         with:
           activate-environment: true
           enable-cache: true
@@ -39,7 +39,7 @@ jobs:
           mkdir -p ~/.local/bin
           ln -sf $(which uv) ~/.local/bin/uv
 
-      - uses: actions/cache@v4
+      - uses: actions/cache@v5
         with:
           path: ~/.cache/pre-commit/
           key: pre-commit-1|${{ hashFiles('.pre-commit-config.yaml') }}
@@ -78,7 +78,7 @@ jobs:
           persist-credentials: false
 
       - name: Cache rustup toolchain
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.rustup
@@ -87,7 +87,7 @@ jobs:
             ${{ runner.os }}-${{ runner.arch }}-rustup-nightly-
 
       - name: Cache Cargo dependencies
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.cargo/git
@@ -115,7 +115,7 @@ jobs:
           persist-credentials: false
 
       - name: Cache rustup toolchain
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.rustup
@@ -124,7 +124,7 @@ jobs:
             ${{ runner.os }}-${{ runner.arch }}-rustup-
 
       - name: Cache Cargo dependencies
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.cargo/git
@@ -151,7 +151,7 @@ jobs:
           persist-credentials: false
 
       - name: Cache rustup toolchain
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.rustup
@@ -160,7 +160,7 @@ jobs:
             ${{ runner.os }}-${{ runner.arch }}-rustup-
 
       - name: Cache Cargo registry
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.cargo/git
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c32d9ace..27e81576 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -36,7 +36,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: actions/download-artifact@v6
+      - uses: actions/download-artifact@v7
 
       - name: Publish to PyPI
         uses: PyO3/maturin-action@86b9d133d34bc1b40018696f782949dac11bd380
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 48e730b7..b8357449 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -62,7 +62,7 @@ jobs:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@ed21f2f24f8dd64503750218de024bcf64c7250a
+        uses: astral-sh/setup-uv@681c641aba71e4a1c380be3ab5e12ad51f415867
         with:
           activate-environment: true
           enable-cache: true
@@ -96,7 +96,7 @@ jobs:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@ed21f2f24f8dd64503750218de024bcf64c7250a
+        uses: astral-sh/setup-uv@681c641aba71e4a1c380be3ab5e12ad51f415867
         with:
           activate-environment: true
           enable-cache: true
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index bb30feae..fffbc5a2 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -24,7 +24,7 @@ jobs:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@ed21f2f24f8dd64503750218de024bcf64c7250a
+        uses: astral-sh/setup-uv@681c641aba71e4a1c380be3ab5e12ad51f415867
         with:
           enable-cache: true