diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 446bd2b8..e1e23d99 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -22,7 +22,7 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-python@v6
         with:
           python-version: "3.x"
@@ -93,7 +93,7 @@ jobs:
             build: ""
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0  # required for versioneer to find tags
 
@@ -106,7 +106,7 @@ jobs:
         if: matrix.arch == 'ppc64le' || matrix.arch == 'riscv64' || matrix.arch == 's390x'
 
       - name: Build wheels
-        uses: pypa/cibuildwheel@v3.2
+        uses: pypa/cibuildwheel@v3.3
         env:
           CIBW_ARCHS: "${{ matrix.arch }}"
           CIBW_BUILD: "cp310-${{ matrix.build }}*"
@@ -121,7 +121,7 @@ jobs:
     needs: [lint]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0  # required for versioneer to find tags
 
@@ -143,7 +143,7 @@ jobs:
         python: ["3.8", "3.13"]
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: astral-sh/setup-uv@v7
         with:
           enable-cache: false
@@ -183,7 +183,7 @@ jobs:
         os: ["ubuntu-latest", "windows-latest", "macos-latest"]
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-python@v6
         id: python
         with:
diff --git a/.github/workflows/update-dependencies.yml b/.github/workflows/update-dependencies.yml
index 1b4d55d5..bfd79ef5 100644
--- a/.github/workflows/update-dependencies.yml
+++ b/.github/workflows/update-dependencies.yml
@@ -25,8 +25,8 @@ jobs:
         - dependency: "openssl"
           dependency_nice: "OpenSSL"
     steps:
-    - uses: actions/checkout@v5
-    - uses: wntrblm/nox@2025.10.16
+    - uses: actions/checkout@v6
+    - uses: wntrblm/nox@2025.11.12
     - name: "Run update: bump ${{ matrix.dependency_nice }}"
       id: bump
       run: |