diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 27494c7..bfba4ae 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -154,14 +154,14 @@ jobs:
 
       # BuildKit enables advanced cache backends (required for GHA cache below)
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       # Build Docker image with GHA cache to avoid recompiling Rust dependencies.
       # cache-from pulls cached layers, cache-to pushes them back (mode=max caches
       # intermediate layers too, so the dependency layer from our split Dockerfile
       # is preserved across runs).
       - name: Build Docker image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           load: true
diff --git a/.github/workflows/update-deps-cargo.yml b/.github/workflows/update-deps-cargo.yml
index 6dc7c6d..e0970a2 100644
--- a/.github/workflows/update-deps-cargo.yml
+++ b/.github/workflows/update-deps-cargo.yml
@@ -17,7 +17,7 @@ jobs:
           private-key: ${{ secrets.HOUSEKEEPING_BOT_PRIVATE_KEY }}
 
       - name: Update Cargo Dependencies
-        uses: alchemaxinc/update-deps/cargo@v1
+        uses: alchemaxinc/update-deps/cargo@v2
         with:
           token: ${{ steps.app.outputs.token }}
           auto-merge: "true"