diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml
index f78569e..d9c5853 100644
--- a/.github/workflows/benchmark.yml
+++ b/.github/workflows/benchmark.yml
@@ -16,10 +16,11 @@ jobs:
     
     steps:
     - name: Checkout code
-      uses: actions/checkout@v4
+      uses: actions/checkout@v7
 
     - name: Set up Python with uv
-      uses: astral-sh/setup-uv@v3
+      # exact pin: astral stopped publishing floating major tags after v7
+      uses: astral-sh/setup-uv@v9.0.0
       with:
         enable-cache: true
         cache-dependency-glob: "requirements.in"
@@ -146,7 +147,7 @@ jobs:
         EOF
 
     - name: Upload profiling reports
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: profiling-reports-${{ github.run_id }}
         path: outputs/pyinstrument/