diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 15f031ad6c..5ea84e07f5 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -191,7 +191,7 @@ jobs:
         allow-prereleases: true
 
     - name: Install uv
-      uses: astral-sh/setup-uv@v6
+      uses: astral-sh/setup-uv@v7
       with:
         enable-cache: true
 
@@ -778,7 +778,7 @@ jobs:
     timeout-minutes: 90
 
     steps:
-    - uses: actions/checkout@v1  # v1 is required to run inside docker
+    - uses: actions/checkout@v5  # v1 is required to run inside docker
 
     - name: Install requirements
       run: |
diff --git a/.github/workflows/configure.yml b/.github/workflows/configure.yml
index c498d39b7d..500b96c03a 100644
--- a/.github/workflows/configure.yml
+++ b/.github/workflows/configure.yml
@@ -56,7 +56,7 @@ jobs:
         python-version: 3.11
 
     - name: Install uv
-      uses: astral-sh/setup-uv@v6
+      uses: astral-sh/setup-uv@v7
 
     - name: Prepare env
       run: uv pip install --python=python --system -r tests/requirements.txt
diff --git a/.github/workflows/nightlies.yml b/.github/workflows/nightlies.yml
index 3197f5abad..7dc1942b82 100644
--- a/.github/workflows/nightlies.yml
+++ b/.github/workflows/nightlies.yml
@@ -25,7 +25,7 @@ jobs:
           fetch-depth: 0
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@v7
 
       - name: Build SDist and wheels
         run: |
diff --git a/.github/workflows/pip.yml b/.github/workflows/pip.yml
index a5e7ffb519..47bb2032fa 100644
--- a/.github/workflows/pip.yml
+++ b/.github/workflows/pip.yml
@@ -31,7 +31,7 @@ jobs:
         python-version: 3.8
 
     - name: Install uv
-      uses: astral-sh/setup-uv@v6
+      uses: astral-sh/setup-uv@v7
 
     - name: Prepare env
       run: uv pip install --system -r tests/requirements.txt
@@ -55,7 +55,7 @@ jobs:
         python-version: 3.8
 
     - name: Install uv
-      uses: astral-sh/setup-uv@v6
+      uses: astral-sh/setup-uv@v7
 
     - name: Prepare env
       run: uv pip install --system -r tests/requirements.txt twine nox
diff --git a/.github/workflows/reusable-standard.yml b/.github/workflows/reusable-standard.yml
index 8bd0d340e3..a220aba1c4 100644
--- a/.github/workflows/reusable-standard.yml
+++ b/.github/workflows/reusable-standard.yml
@@ -51,7 +51,7 @@ jobs:
         run: brew install boost
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@v7
         with:
           enable-cache: true
 
diff --git a/.github/workflows/tests-cibw.yml b/.github/workflows/tests-cibw.yml
index f232544bd9..96a4703882 100644
--- a/.github/workflows/tests-cibw.yml
+++ b/.github/workflows/tests-cibw.yml
@@ -22,7 +22,7 @@ jobs:
         submodules: true
         fetch-depth: 0
 
-    - uses: pypa/cibuildwheel@v3.1
+    - uses: pypa/cibuildwheel@v3.2
       env:
         PYODIDE_BUILD_EXPORTS: whole_archive
       with:
@@ -45,7 +45,7 @@ jobs:
     # We have to uninstall first because GH is now using a local tap to build cmake<4, iOS needs cmake>=4
     - run: brew uninstall cmake && brew install cmake
 
-    - uses: pypa/cibuildwheel@v3.1
+    - uses: pypa/cibuildwheel@v3.2
       env:
         CIBW_PLATFORM: ios
         CIBW_SKIP: cp314-*  # https://github.com/pypa/cibuildwheel/issues/2494
@@ -80,7 +80,7 @@ jobs:
 
     - run: pipx install patchelf
 
-    - uses: pypa/cibuildwheel@v3.1
+    - uses: pypa/cibuildwheel@v3.2
       env:
         CIBW_PLATFORM: android
       with: