diff --git a/.github/workflows/docs-deploy.yml b/.github/workflows/docs-deploy.yml
index 1aa02ebc..25c531f3 100644
--- a/.github/workflows/docs-deploy.yml
+++ b/.github/workflows/docs-deploy.yml
@@ -41,7 +41,7 @@ jobs:
       run: make html --jobs 2
 
     - name: Deploy 🚀
-      uses: JamesIves/github-pages-deploy-action@v4.6.3
+      uses: JamesIves/github-pages-deploy-action@v4.6.8
       if: ${{ github.event_name == 'push' }}
       with:
         token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/release-pypi.yml b/.github/workflows/release-pypi.yml
index 0a57b75d..ba1c4094 100644
--- a/.github/workflows/release-pypi.yml
+++ b/.github/workflows/release-pypi.yml
@@ -30,7 +30,7 @@ jobs:
     # We do this, since failures on test.pypi aren't that bad
     #- name: Publish to Test PyPI
     #  if: startsWith(github.event.ref, 'refs/tags') || github.event_name == 'release'
-    #  uses: pypa/gh-action-pypi-publish@v1.10.0
+    #  uses: pypa/gh-action-pypi-publish@v1.10.2
     #  with:
     #    user: __token__
     #    password: ${{ secrets.test_pypi_password }}
@@ -38,7 +38,7 @@ jobs:
 
     - name: Publish distribution 📦 to PyPI
       if: startsWith(github.ref, 'refs/tags/') && github.event_name != 'pull_request'
-      uses: pypa/gh-action-pypi-publish@v1.10.0
+      uses: pypa/gh-action-pypi-publish@v1.10.2
       with:
         user: __token__
         password: ${{ secrets.pypi_password }}
@@ -78,7 +78,7 @@ jobs:
 
       - name: Create Pull Request
         if: startsWith(github.ref, 'refs/tags/')
-        uses: peter-evans/create-pull-request@v6
+        uses: peter-evans/create-pull-request@v7
         with:
           title: "docs: Bump HPU ref `${{ env.TAG }}`"
           committer: GitHub <noreply@github.com>