diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index c8778236..2dabbdd2 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -14,22 +14,22 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
 
-      - uses: actions/cache@v2
+      - uses: actions/cache@v4
         name: Cache pip directory
         with:
           path: ~/.cache/pip
           key: ${{ runner.os }}-pip-3.9
 
-      - uses: actions/cache@v2
+      - uses: actions/cache@v4
         name: Cache poetry deps
         with:
           path: .venv
           key: ${{ runner.os }}-build-${{ hashFiles('poetry.lock') }}-3.9
 
       - name: Set up Python
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@v5
         with:
           python-version: 3.9
 
@@ -60,15 +60,15 @@ jobs:
         lang: [C, en_US.UTF-8]
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
 
-      - uses: actions/cache@v2
+      - uses: actions/cache@v4
         name: Cache pip directory
         with:
           path: ~/.cache/pip
           key: ${{ runner.os }}-pip-3.9
 
-      - uses: actions/cache@v2
+      - uses: actions/cache@v4
         name: Cache poetry deps
         env:
           cache-name: poetry-deps
@@ -77,7 +77,7 @@ jobs:
           key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ hashFiles('poetry.lock') }}-${{ matrix.python-version }}
 
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@v5
         with:
           python-version: ${{ matrix.python-version }}
 
@@ -95,7 +95,7 @@ jobs:
           SH_TESTS_RUNNING=1 SH_TESTS_USE_SELECT=${{ matrix.use-select }} LANG=${{ matrix.lang }} poetry run coverage run -a -m pytest
 
       - name: Store coverage
-        uses: actions/upload-artifact@v2
+        uses: actions/upload-artifact@v4
         with:
           name: coverage.${{ matrix.use-select }}.${{ matrix.lang }}.${{ matrix.python-version }}
           path: .coverage
@@ -106,10 +106,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # required because coveralls complains if we're not in a git dir
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
 
       - name: Set up Python
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@v5
         with:
           python-version: 3.9
 
@@ -118,7 +118,7 @@ jobs:
           pip install coverage coveralls
 
       - name: Download coverage artifacts
-        uses: actions/download-artifact@v2
+        uses: actions/download-artifact@v4
         with:
           path: coverage-artifacts
 
@@ -143,7 +143,7 @@ jobs:
       id-token: write
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
 
       - name: Get current version
         id: get_version
@@ -155,7 +155,7 @@ jobs:
           git push -f origin "${{steps.get_version.outputs.version}}"
 
       - name: Set up Python
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@v5
         with:
           python-version: 3.9