diff --git a/.github/workflows/ci-label.yml b/.github/workflows/ci-label.yml
index b42b303..4ac41d7 100644
--- a/.github/workflows/ci-label.yml
+++ b/.github/workflows/ci-label.yml
@@ -11,7 +11,7 @@ jobs:
   PR_triage:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/labeler@v6
+      - uses: actions/labeler@v7
         with:
           configuration-path: .github/labeler.yml
           repo-token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/ci-locks.yml b/.github/workflows/ci-locks.yml
index 92c2de1..94a0a9f 100644
--- a/.github/workflows/ci-locks.yml
+++ b/.github/workflows/ci-locks.yml
@@ -20,7 +20,7 @@ permissions: {}
 
 jobs:
   refresh_lockfiles:
-    uses: scitools/workflows/.github/workflows/refresh-lockfiles.yml@1f2141422a63321a32575ddd186e53acff12550c
+    uses: scitools/workflows/.github/workflows/refresh-lockfiles.yml@7c41342d8285bc7747b6f7bc4cd2639cdcbb017a
     secrets:
       AUTH_APP_ID: ${{ secrets.AUTH_APP_ID }}
       AUTH_APP_PRIVATE_KEY: ${{ secrets.AUTH_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/ci-manifest.yml b/.github/workflows/ci-manifest.yml
index bbd5551..9dbd554 100644
--- a/.github/workflows/ci-manifest.yml
+++ b/.github/workflows/ci-manifest.yml
@@ -27,4 +27,4 @@ permissions: {}
 jobs:
   manifest:
     name: "check-manifest"
-    uses: scitools/workflows/.github/workflows/ci-manifest.yml@1f2141422a63321a32575ddd186e53acff12550c
+    uses: scitools/workflows/.github/workflows/ci-manifest.yml@7c41342d8285bc7747b6f7bc4cd2639cdcbb017a
diff --git a/.github/workflows/ci-template-check.yml b/.github/workflows/ci-template-check.yml
index f5a4e30..0a83a46 100644
--- a/.github/workflows/ci-template-check.yml
+++ b/.github/workflows/ci-template-check.yml
@@ -12,7 +12,7 @@ permissions: {}
 
 jobs:
   prompt-share:
-    uses: scitools/workflows/.github/workflows/ci-template-check.yml@1f2141422a63321a32575ddd186e53acff12550c
+    uses: scitools/workflows/.github/workflows/ci-template-check.yml@7c41342d8285bc7747b6f7bc4cd2639cdcbb017a
     secrets:
       AUTH_APP_ID: ${{ secrets.AUTH_APP_ID }}
       AUTH_APP_PRIVATE_KEY: ${{ secrets.AUTH_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/ci-wheels.yml b/.github/workflows/ci-wheels.yml
index 83e013d..55aa9e0 100644
--- a/.github/workflows/ci-wheels.yml
+++ b/.github/workflows/ci-wheels.yml
@@ -114,7 +114,7 @@ jobs:
         merge-multiple: true
         path: ${{ github.workspace }}/dist
 
-    - uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b
+    - uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247
       with:
 
         repository_url: https://test.pypi.org/legacy/
@@ -137,6 +137,6 @@ jobs:
         merge-multiple: true
         path: ${{ github.workspace }}/dist
 
-    - uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b
+    - uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247
       with:
         print_hash: true