diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 1c983c4..b058a67 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -48,7 +48,7 @@ jobs:
       # only store the artifact for 'retention-days'
       - name: Upload docs artifact
         # if: github.event.pull_request.merged == true
-        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882  # v4.4.3
+        uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b  # v4.5.0
         with:
           name: built_docs
           path: docs/_build/html
diff --git a/.github/workflows/package.yml b/.github/workflows/package.yml
index 818b507..32191f3 100644
--- a/.github/workflows/package.yml
+++ b/.github/workflows/package.yml
@@ -37,7 +37,7 @@ jobs:
           python -m pep517.build --source --binary --out-dir dist/ .
 
       - name: Publish distribution to PyPI
-        uses: pypa/gh-action-pypi-publish@15c56dba361d8335944d31a2ecd17d700fc7bcbc  # v1.12.2
+        uses: pypa/gh-action-pypi-publish@67339c736fd9354cd4f8cb0b744f2b82a74b5c70  # v1.12.3
         with:
           user: __token__
           password: ${{ secrets.pypi_password }}
\ No newline at end of file