diff --git a/.github/workflows/build_wheels.yml b/.github/workflows/build_wheels.yml
index dcab79e26..e02448c80 100644
--- a/.github/workflows/build_wheels.yml
+++ b/.github/workflows/build_wheels.yml
@@ -87,7 +87,7 @@ jobs:
           submodules: "recursive"
 
       - name: Build wheels
-        uses: pypa/cibuildwheel@v2.19.2
+        uses: pypa/cibuildwheel@v2.20.0
         env:
           CIBW_BUILD: "${{ matrix.python.version }}-*"
           CIBW_SKIP: "{pp*,*-musllinux_*}"
@@ -115,7 +115,7 @@ jobs:
             matplotlib==${{ matrix.python.oldest_matplotlib }}
           CIBW_TEST_COMMAND: "cd {package}/tests && pytest . -v --log-level=DEBUG"
 
-      - uses: actions/upload-artifact@v4.3.4
+      - uses: actions/upload-artifact@v4.4.0
         with:
           name: dist-${{ matrix.os.base }}-${{ matrix.os.version }}-${{ matrix.python.version }}
           path: ./wheelhouse/*.whl
@@ -129,7 +129,7 @@ jobs:
         with:
           submodules: "recursive"
 
-      - uses: actions/setup-python@v5.1.1
+      - uses: actions/setup-python@v5.2.0
         name: Install Python
         with:
           python-version: '3.12'
@@ -143,7 +143,7 @@ jobs:
       - name: Build sdist
         run: python -m build --sdist --outdir dist/ .
 
-      - uses: actions/upload-artifact@v4.3.4
+      - uses: actions/upload-artifact@v4.4.0
         with:
           name: dist-sdist
           path: dist/*.tar.gz
@@ -169,7 +169,7 @@ jobs:
       - name: Upload to PyPI
         # upload to PyPI on every tag starting with 'v'
         if: startsWith(github.ref, 'refs/tags/v')
-        uses: pypa/gh-action-pypi-publish@v1.9.0
+        uses: pypa/gh-action-pypi-publish@v1.10.0
         with:
           user: __token__
           password: ${{ secrets.PYPI_API_TOKEN }}
diff --git a/.github/workflows/update-conda-lockfiles.yaml b/.github/workflows/update-conda-lockfiles.yaml
index f8989e175..a5607fd37 100644
--- a/.github/workflows/update-conda-lockfiles.yaml
+++ b/.github/workflows/update-conda-lockfiles.yaml
@@ -8,7 +8,7 @@ on:
 
 jobs:
   update:
-    uses: glotzerlab/workflows/.github/workflows/update-conda-lockfiles.yaml@ea2e25d07af862a1c696a932c2bd6b242d142049 # 0.2.0
+    uses: glotzerlab/workflows/.github/workflows/update-conda-lockfiles.yaml@ae7e7c6931098a313ef8069ef04b88a55c3a40f6 # 0.3.0
     secrets: inherit
     with:
       branch: main