diff --git a/.github/workflows/dists.yml b/.github/workflows/dists.yml
index c0604b0..81430e4 100644
--- a/.github/workflows/dists.yml
+++ b/.github/workflows/dists.yml
@@ -35,7 +35,7 @@ jobs:
 
     runs-on: ${{ matrix.os }}
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
 
     # keep python versions in sync with
     #   - pyproject.toml
@@ -70,7 +70,7 @@ jobs:
         python-version: '3.14'
         architecture: ${{ ( startsWith(matrix.os, 'windows') && matrix.target == 'i686' ) && 'x86' || null }}
 
-    - uses: PyO3/maturin-action@v1.50.1
+    - uses: PyO3/maturin-action@v1.51.0
       with:
         target: ${{ matrix.target }}
         manylinux: ${{ matrix.manylinux }}
@@ -86,7 +86,7 @@ jobs:
       with:
         python-version: '3.14t'
         architecture: ${{ ( startsWith(matrix.os, 'windows') && matrix.target == 'i686' ) && 'x86' || null }}
-    - uses: PyO3/maturin-action@v1.50.1
+    - uses: PyO3/maturin-action@v1.51.0
       with:
         target: ${{ matrix.target }}
         manylinux: ${{ matrix.manylinux }}
@@ -106,9 +106,9 @@ jobs:
     name: sdist
     runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
 
-    - uses: PyO3/maturin-action@v1.50.1
+    - uses: PyO3/maturin-action@v1.51.0
       with:
         command: sdist
         args: --out dist
@@ -138,12 +138,12 @@ jobs:
     - run: ls -ltra dist/
 
     - name: Upload release assets
-      uses: softprops/action-gh-release@v2.6.1
+      uses: softprops/action-gh-release@v3.0.1
       with:
         files: dist/*
 
     # trusted publisher in https://pypi.org/manage/project/blake3/settings/publishing/
     - name: Publish package distributions to PyPI
-      uses: pypa/gh-action-pypi-publish@v1.13.0
+      uses: pypa/gh-action-pypi-publish@v1.14.0
       with:
         skip-existing: true
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 2aafde5..cf59a37 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -34,7 +34,7 @@ jobs:
     env:
       CARGO_BUILD_TARGET: ${{ matrix.platform.rust-target }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: astral-sh/setup-uv@v7
       - uses: dtolnay/rust-toolchain@master
         with:
@@ -65,7 +65,7 @@ jobs:
         ]
       fail-fast: false
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: astral-sh/setup-uv@v7
       - run: uv venv --python cpython-${{ matrix.python-version }}-${{ matrix.platform.python-target }}
       - run: uv run tests/python_info.py
@@ -90,7 +90,7 @@ jobs:
     name: cargo-lock
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: dtolnay/rust-toolchain@stable
       - run: cargo check --locked
 
@@ -106,7 +106,7 @@ jobs:
         #   - the c_impl tests above
         python-version: ["3.8", "3.14"]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: astral-sh/setup-uv@v7
       - name: Run mypy
         run: uv run --python ${{ matrix.python-version }} --with mypy mypy --strict blake3.pyi tests/test_blake3.py