diff --git a/.github/workflows/build_zipapp.yml b/.github/workflows/build_zipapp.yml
index 3b725ab..73aadc5 100644
--- a/.github/workflows/build_zipapp.yml
+++ b/.github/workflows/build_zipapp.yml
@@ -26,7 +26,7 @@ jobs:
       run: |
         python -m ducktools.env rebuild_env --zipapp
     - name: Store the built zipapp
-      uses: actions/upload-artifact@v5
+      uses: actions/upload-artifact@v6
       with:
         name: ducktools-zipapp
         path: dist/
@@ -45,12 +45,12 @@ jobs:
 
     steps:
     - name: Download the zipapp
-      uses: actions/download-artifact@v6
+      uses: actions/download-artifact@v7
       with:
         name: ducktools-zipapp
         path: dist/
     - name: Sign the zipapp with Sigstore
-      uses: sigstore/gh-action-sigstore-python@v3.1.0
+      uses: sigstore/gh-action-sigstore-python@v3.2.0
       with:
         release-signing-artifacts: false
         inputs: >-
diff --git a/.github/workflows/publish_to_pypi.yml b/.github/workflows/publish_to_pypi.yml
index 8b2de02..0f1eeca 100644
--- a/.github/workflows/publish_to_pypi.yml
+++ b/.github/workflows/publish_to_pypi.yml
@@ -26,7 +26,7 @@ jobs:
     - name: Build a binary wheel and a source tarball
       run: python3 -m build
     - name: Store the distribution packages
-      uses: actions/upload-artifact@v5
+      uses: actions/upload-artifact@v6
       with:
         name: python-package-distributions
         path: dist/
@@ -45,7 +45,7 @@ jobs:
 
     steps:
     - name: Download all the dists
-      uses: actions/download-artifact@v6
+      uses: actions/download-artifact@v7
       with:
         name: python-package-distributions
         path: dist/
@@ -66,12 +66,12 @@ jobs:
 
     steps:
     - name: Download all the dists
-      uses: actions/download-artifact@v6
+      uses: actions/download-artifact@v7
       with:
         name: python-package-distributions
         path: dist/
     - name: Sign the dists with Sigstore
-      uses: sigstore/gh-action-sigstore-python@v3.1.0
+      uses: sigstore/gh-action-sigstore-python@v3.2.0
       with:
         release-signing-artifacts: false
         inputs: >-
diff --git a/.github/workflows/publish_to_testpypi.yml b/.github/workflows/publish_to_testpypi.yml
index 38faa8e..424f335 100644
--- a/.github/workflows/publish_to_testpypi.yml
+++ b/.github/workflows/publish_to_testpypi.yml
@@ -27,7 +27,7 @@ jobs:
     - name: Build a binary wheel and a source tarball
       run: python3 -m build
     - name: Store the distribution packages
-      uses: actions/upload-artifact@v5
+      uses: actions/upload-artifact@v6
       with:
         name: python-package-distributions
         path: dist/
@@ -47,7 +47,7 @@ jobs:
 
     steps:
     - name: Download all the dists
-      uses: actions/download-artifact@v6
+      uses: actions/download-artifact@v7
       with:
         name: python-package-distributions
         path: dist/