diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index acd41f7..f0bb30a 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -17,7 +17,7 @@ jobs:
       pull-requests: write
 
     steps:
-    - uses: actions/labeler@v4
+    - uses: actions/labeler@v6
       with:
         repo-token: "${{ secrets.GITHUB_TOKEN }}"
         dot: true
diff --git a/.github/workflows/pre-commit-update.yml b/.github/workflows/pre-commit-update.yml
index 2400e40..6568d73 100644
--- a/.github/workflows/pre-commit-update.yml
+++ b/.github/workflows/pre-commit-update.yml
@@ -40,7 +40,7 @@ jobs:
         run: uv run pre-commit autoupdate
 
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           commit-message: "chore: pre-commit autoupdate"
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 52d56bd..1aa9fc5 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -37,7 +37,7 @@ jobs:
       - uses: actions/checkout@v6
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: python
           # Python is an interpreted language — no compilation step is needed.
@@ -48,7 +48,7 @@ jobs:
           dependency-caching: true
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4
         with:
           category: /language:python
 
diff --git a/.github/workflows/sync-skip-if-exists.yml b/.github/workflows/sync-skip-if-exists.yml
index 9f8d29d..d2e7cdc 100644
--- a/.github/workflows/sync-skip-if-exists.yml
+++ b/.github/workflows/sync-skip-if-exists.yml
@@ -31,7 +31,7 @@ jobs:
         run: python scripts/sync_skip_if_exists.py --write
 
       - name: Create pull request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
         with:
           commit-message: "chore(copier): sync _skip_if_exists list"
           title: "chore(copier): sync _skip_if_exists list"
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index a648962..010229e 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -66,7 +66,7 @@ jobs:
 
       - name: Upload coverage to Codecov
         if: matrix.python-version == '3.11'
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v6
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: ./coverage.xml