diff --git a/.github/workflows/ci-gpu.yml b/.github/workflows/ci-gpu.yml
index d47d9d8..9d8f592 100644
--- a/.github/workflows/ci-gpu.yml
+++ b/.github/workflows/ci-gpu.yml
@@ -40,10 +40,10 @@ jobs:
           fetch-depth: 0
       - name: Check NVIDIA SMI
         run: nvidia-smi
-      - uses: actions/setup-python@v6.3.0
+      - uses: actions/setup-python@v7.0.0
         with:
           python-version: "3.12"
-      - uses: astral-sh/setup-uv@v8.3.2
+      - uses: astral-sh/setup-uv@v9.0.0
         with:
           enable-cache: true  # "auto" is `false` on non-GitHub runners
       - name: Install package
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index bebdc60..1810b3c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,7 +20,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
         with: { fetch-depth: 0, filter: "blob:none" }
-      - uses: astral-sh/setup-uv@v8.3.2
+      - uses: astral-sh/setup-uv@v9.0.0
       - name: Get test environments
         id: get-envs
         run: |
@@ -54,7 +54,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
         with: { fetch-depth: 0, filter: "blob:none" }
-      - uses: astral-sh/setup-uv@v8.3.2
+      - uses: astral-sh/setup-uv@v9.0.0
         with:
           python-version: ${{ matrix.env.python }}
       - name: create environment
@@ -79,12 +79,12 @@ jobs:
     steps:
       - uses: actions/checkout@v7
         with: { fetch-depth: 0, filter: "blob:none" }
-      - uses: actions/setup-python@v6.3.0
+      - uses: actions/setup-python@v7.0.0
         with:
           python-version: '3.14'
-      - uses: astral-sh/setup-uv@v8.3.2
+      - uses: astral-sh/setup-uv@v9.0.0
       - run: uv pip install --system --group=test -e .[full]
-      - uses: CodSpeedHQ/action@v4
+      - uses: CodSpeedHQ/action@v4.18.5
         with:
           mode: simulation
           run: pytest -m benchmark --codspeed -n auto
@@ -94,10 +94,10 @@ jobs:
     steps:
       - uses: actions/checkout@v7
         with: { fetch-depth: 0, filter: "blob:none" }
-      - uses: actions/setup-python@v6.3.0
+      - uses: actions/setup-python@v7.0.0
         with:
           python-version: '3.14'
-      - uses: astral-sh/setup-uv@v8.3.2
+      - uses: astral-sh/setup-uv@v9.0.0
       - run: uv pip install --system -e .
       - run: python -c 'import fast_array_utils as fau; print(fau.__all__)'
       - run: uv pip install --system -e .[testing]
@@ -110,7 +110,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
         with: { fetch-depth: 0, filter: "blob:none" }
-      - uses: j178/prek-action@v2.0.5
+      - uses: j178/prek-action@v2.0.6
   pass:
     name: All Checks
     if: always()
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index a836ee1..513b11c 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -14,7 +14,7 @@ jobs:
       id-token: write # to authenticate as Trusted Publisher to pypi.org
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-python@v6.3.0
+      - uses: actions/setup-python@v7.0.0
         with:
           python-version: "3.x"
           cache: pip