diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b6012afea..f1c373065 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -120,7 +120,7 @@ jobs:
         with:
           fetch-depth: 1
       - id: filter
-        uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2
+        uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3
         with:
           filters: |
             cpp:
@@ -706,7 +706,7 @@ jobs:
         with:
           fetch-depth: 1
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.12'
           cache: pip
@@ -770,7 +770,7 @@ jobs:
           extra-apt: mold
 
       - id: python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.12'
           cache: pip
@@ -911,7 +911,7 @@ jobs:
           extra-apt: mold
 
       - id: python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.12'
           cache: pip
@@ -1201,7 +1201,7 @@ jobs:
         with:
           extra-apt: mold
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         if: steps.test-plan.outputs.python_shard_count != '0'
         with:
           python-version: '3.12'
@@ -1359,7 +1359,7 @@ jobs:
         with:
           extra-apt: mold
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.12'
           cache: pip
@@ -1990,7 +1990,7 @@ jobs:
         with:
           fetch-depth: 1
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         if: matrix.graph == 'python'
         with:
           python-version: '3.12'
@@ -2249,7 +2249,7 @@ jobs:
           version="$(printf '%s' "$version" | tr -c 'A-Za-z0-9._-' '-')"
           echo "key=${image}-${RUNNER_ARCH}-gcc-${version}" >> "$GITHUB_OUTPUT"
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         id: openmp-python
         if: matrix.kind == 'python'
         with:
diff --git a/.github/workflows/docs-pr.yml b/.github/workflows/docs-pr.yml
index 3ddfc862e..6cc7630d1 100644
--- a/.github/workflows/docs-pr.yml
+++ b/.github/workflows/docs-pr.yml
@@ -29,7 +29,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.12'
 
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index c0bdaa464..6ac8fb238 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -34,7 +34,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.12'
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2c2714279..b9b8cf60d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -46,7 +46,7 @@ jobs:
           name: pops-macos-arm64-cp312
           path: ${{ runner.temp }}/wheelhouse
 
-      - uses: conda-incubator/setup-miniconda@v3
+      - uses: conda-incubator/setup-miniconda@v4
         with:
           miniforge-version: latest
           activate-environment: pops
diff --git a/.github/workflows/wheels.yml b/.github/workflows/wheels.yml
index 4d96db4f8..e6745c81a 100644
--- a/.github/workflows/wheels.yml
+++ b/.github/workflows/wheels.yml
@@ -31,7 +31,7 @@ jobs:
         with:
           fetch-depth: 1
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.12'