diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml
index f08c92744..78907b6d4 100644
--- a/.github/workflows/pr.yaml
+++ b/.github/workflows/pr.yaml
@@ -13,7 +13,7 @@ jobs:
     uses: ./.github/workflows/check.yaml
 
   osv-scan:
-    uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@v2.3.5
+    uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@v2.3.8
     permissions:
       actions: read
       contents: read
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index df300de5f..ddcecfe54 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -54,7 +54,7 @@ jobs:
 
       - name: Set up Zig
         if: runner.os == 'Linux'
-        uses: mlugg/setup-zig@v1
+        uses: mlugg/setup-zig@v2
         with:
           version: "0.14.0"
 
@@ -126,7 +126,7 @@ jobs:
           tar czf "$TARBALL" -C pkg .
 
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: binary-${{ matrix.target }}
           path: task-*.tar.gz
@@ -140,13 +140,13 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Download all artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           path: artifacts
           merge-multiple: true
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           files: artifacts/task-*.tar.gz
           generate_release_notes: true