diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5f837884..eaf06e8c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -33,7 +33,7 @@ jobs:
         path: dist
 
     - name: Generate artifact attestation for sdist and wheel
-      uses: actions/attest-build-provenance@00014ed6ed5efc5b1ab7f7f34a39eb55d41aa4f8 # v3.1.0
+      uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0
       with:
         subject-path: "dist/cibuildwheel-*"
 
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 1c22a96d..c5f78f7b 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -164,7 +164,7 @@ jobs:
         echo "CIBW_ENABLE=${CIBW_ENABLE}" >> $GITHUB_ENV
 
     - name: Download a sample project
-      uses: actions/download-artifact@v5
+      uses: actions/download-artifact@v7
       with:
         name: sample_proj
         path: sample_proj
@@ -293,7 +293,7 @@ jobs:
       run: uv sync --no-dev --group test
 
     - name: Download a sample project
-      uses: actions/download-artifact@v5
+      uses: actions/download-artifact@v7
       with:
         name: sample_proj
         path: sample_proj
@@ -332,7 +332,7 @@ jobs:
     steps:
     - uses: actions/checkout@v6
     - name: Download a sample project
-      uses: actions/download-artifact@v5
+      uses: actions/download-artifact@v7
       with:
         name: sample_proj
         path: sample_proj