diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index 9fa02d6..1f22520 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -28,7 +28,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Install Conda environment from environment.yml
-        uses: mamba-org/setup-micromamba@v1
+        uses: mamba-org/setup-micromamba@v2
         with:
           # environment-file is not assumed anymore
           environment-file: ci/environment.yaml
diff --git a/.github/workflows/pypi-release.yaml b/.github/workflows/pypi-release.yaml
index 6cd9721..7d867a3 100644
--- a/.github/workflows/pypi-release.yaml
+++ b/.github/workflows/pypi-release.yaml
@@ -19,7 +19,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - uses: actions/setup-python@v5.2.0
+      - uses: actions/setup-python@v5.3.0
         name: Install Python
         with:
           python-version: "3.11"
@@ -62,7 +62,7 @@ jobs:
     needs: build-artifacts
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/setup-python@v5.2.0
+      - uses: actions/setup-python@v5.3.0
         name: Install Python
         with:
           python-version: "3.11"
@@ -80,7 +80,7 @@ jobs:
           python -m pip install dist/carbonplan_data*.whl
           python -c "from carbonplan_data.utils import get_versions; print(get_versions())"
       - name: Publish package to TestPyPI
-        uses: pypa/gh-action-pypi-publish@v1.10.2
+        uses: pypa/gh-action-pypi-publish@v1.12.2
         with:
           password: ${{ secrets.TEST_PYPI_TOKEN }}
           repository-url: https://test.pypi.org/legacy/
@@ -96,7 +96,7 @@ jobs:
           name: releases
           path: dist
       - name: Publish package to PyPI
-        uses: pypa/gh-action-pypi-publish@v1.10.2
+        uses: pypa/gh-action-pypi-publish@v1.12.2
         with:
           password: ${{ secrets.PYPI_TOKEN }}
           # verbose: true