diff --git a/.github/workflows/build-wheels.yml b/.github/workflows/build-wheels.yml
index cb931fc..d48fb01 100644
--- a/.github/workflows/build-wheels.yml
+++ b/.github/workflows/build-wheels.yml
@@ -18,12 +18,12 @@ jobs:
         os: [ubuntu-latest, macos-14, macos-15-intel] # need to fix windows.. leave off for now
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0 # make sure we get the version info
 
       - name: Build wheels
-        uses: pypa/cibuildwheel@v3.4.1
+        uses: pypa/cibuildwheel@v4.1.0
         with:
           extras: "uv"
 
@@ -36,7 +36,7 @@ jobs:
     name: Build source distribution
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0 # make sure we get the version info
 
diff --git a/.github/workflows/cmake-build.yml b/.github/workflows/cmake-build.yml
index e8c0bde..d56d9e0 100644
--- a/.github/workflows/cmake-build.yml
+++ b/.github/workflows/cmake-build.yml
@@ -14,7 +14,7 @@ jobs:
         with:
           packages: zlib1g-dev libjpeg-dev libhdf5-dev
       - name: Checkout on Ubuntu
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0 # fetch all history for git describe to work
       - name: Set up Python
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index e82b04c..7daf4e0 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -22,7 +22,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       -
         name: Run Labeler
         uses: crazy-max/ghaction-github-labeler@v6
diff --git a/.github/workflows/test_windows.yml b/.github/workflows/test_windows.yml
index 36673ad..c5629c1 100644
--- a/.github/workflows/test_windows.yml
+++ b/.github/workflows/test_windows.yml
@@ -39,7 +39,7 @@ jobs:
       #    ssh-private-key: ${{ secrets.DIPMAS_DEPLOY_KEY }}
 
       - name: Check out the repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Install uv
         uses: astral-sh/setup-uv@v7
@@ -82,7 +82,7 @@ jobs:
               print(f"result={result}", file=io)
 
       - name: Restore pre-commit cache
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         if: matrix.session == 'pre-commit'
         with:
           path: ~/.cache/pre-commit
@@ -115,7 +115,7 @@ jobs:
     needs: tests
     steps:
       - name: Check out the repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Install uv
         uses: astral-sh/setup-uv@v7
@@ -141,6 +141,6 @@ jobs:
           uv run nox --session=coverage -- xml
 
       - name: Upload coverage report
-        uses: codecov/codecov-action@v6
+        uses: codecov/codecov-action@v7
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 3f398db..e5b641a 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -40,7 +40,7 @@ jobs:
       #    ssh-private-key: ${{ secrets.DIPMAS_DEPLOY_KEY }}
 
       - name: Check out the repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Install uv
         uses: astral-sh/setup-uv@v7
@@ -83,7 +83,7 @@ jobs:
               print(f"result={result}", file=io)
 
       - name: Restore pre-commit cache
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         if: matrix.session == 'pre-commit'
         with:
           path: ~/.cache/pre-commit
@@ -116,7 +116,7 @@ jobs:
     needs: tests
     steps:
       - name: Check out the repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Install uv
         uses: astral-sh/setup-uv@v7
@@ -142,6 +142,6 @@ jobs:
           uv run nox --session=coverage -- xml
 
       - name: Upload coverage report
-        uses: codecov/codecov-action@v6
+        uses: codecov/codecov-action@v7
         with:
           token: ${{ secrets.CODECOV_TOKEN }}