diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml
index a9b20369..75406db6 100644
--- a/.github/workflows/backport.yml
+++ b/.github/workflows/backport.yml
@@ -25,7 +25,7 @@ jobs:
           echo "matched=$matched" >> $GITHUB_OUTPUT
       - name: Backport Action
         if: fromJSON(steps.check_labels.outputs.matched) > 0
-        uses: sorenlouv/backport-github-action@v12.0.0
+        uses: sorenlouv/backport-github-action@v12.0.4
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           auto_backport_label_prefix: backport-to-
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index f5292d90..339ca9ae 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -11,7 +11,7 @@ jobs:
         os: [ubuntu-24.04]
         python-version: [pypy3.11, "graalpy-25.0", "3.x"]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - uses: actions/setup-python@v6
@@ -26,7 +26,7 @@ jobs:
           sudo locale-gen ps_AF.UTF-8
       - name: Cache GNU GMP builds
         id: cache-gmp
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: .local
           key: ${{ matrix.os }}-${{ hashFiles('scripts/*') }}
@@ -59,7 +59,7 @@ jobs:
     needs:
       - coverage
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - run: sudo apt-get update
@@ -81,7 +81,7 @@ jobs:
           path: |
             build/coverage/
             build/coverage*.info
-      - uses: codecov/codecov-action@v6
+      - uses: codecov/codecov-action@v7
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           gcov_ignore: pythoncapi_compat.h
diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index 5baf1700..9d3f7f62 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -4,7 +4,7 @@ jobs:
   linter:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - uses: actions/setup-python@v6
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index e7991db1..8acdfbf6 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -6,7 +6,7 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/')
     runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         fetch-depth: 0
     - uses: actions/setup-python@v6
@@ -17,7 +17,7 @@ jobs:
     - run: pip install build
     - name: Cache GNU GMP builds
       id: cache-gmp
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: .local
         key: ${{ matrix.os }}-${{ hashFiles('scripts/*') }}
@@ -67,7 +67,7 @@ jobs:
         pattern: python-gmp-*
         path: dist/
         merge-multiple: true
-    - uses: sigstore/gh-action-sigstore-python@v3.3.0
+    - uses: sigstore/gh-action-sigstore-python@v3.4.0
       with:
         inputs: >-
           ./dist/*.tar.gz
diff --git a/.github/workflows/wheels.yml b/.github/workflows/wheels.yml
index 628ae796..675c1f53 100644
--- a/.github/workflows/wheels.yml
+++ b/.github/workflows/wheels.yml
@@ -15,10 +15,10 @@ jobs:
             msystem: clangarm64
             menv: clang-aarch64
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
-      - uses: msys2/setup-msys2@v2.31.1
+      - uses: msys2/setup-msys2@v2.32.0
         name: Setup msys2
         with:
           install: >-