diff --git a/.github/workflows/ci-citation.yml b/.github/workflows/ci-citation.yml
index 849b79e..896ed89 100644
--- a/.github/workflows/ci-citation.yml
+++ b/.github/workflows/ci-citation.yml
@@ -20,7 +20,7 @@ jobs:
     name: "validate"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/ci-locks.yml b/.github/workflows/ci-locks.yml
index d602ceb..499d520 100644
--- a/.github/workflows/ci-locks.yml
+++ b/.github/workflows/ci-locks.yml
@@ -18,5 +18,5 @@ concurrency:
 
 jobs:
   refresh_lockfiles:
-    uses: scitools/workflows/.github/workflows/refresh-lockfiles.yml@2025.07.3
+    uses: scitools/workflows/.github/workflows/refresh-lockfiles.yml@2025.08.2
     secrets: inherit
diff --git a/.github/workflows/ci-manifest.yml b/.github/workflows/ci-manifest.yml
index c4ecd17..eeffb80 100644
--- a/.github/workflows/ci-manifest.yml
+++ b/.github/workflows/ci-manifest.yml
@@ -25,4 +25,4 @@ concurrency:
 jobs:
   manifest:
     name: "check-manifest"
-    uses: scitools/workflows/.github/workflows/ci-manifest.yml@2025.07.3
+    uses: scitools/workflows/.github/workflows/ci-manifest.yml@2025.08.2
diff --git a/.github/workflows/ci-template-check.yml b/.github/workflows/ci-template-check.yml
index d2d2525..e443ea4 100644
--- a/.github/workflows/ci-template-check.yml
+++ b/.github/workflows/ci-template-check.yml
@@ -10,7 +10,7 @@ on:
 
 jobs:
   prompt-share:
-    uses: scitools/workflows/.github/workflows/ci-template-check.yml@2025.07.3
+    uses: scitools/workflows/.github/workflows/ci-template-check.yml@2025.08.2
     secrets: inherit
     with:
       pr_number: ${{ github.event.pull_request.number }}
diff --git a/.github/workflows/ci-tests.yml b/.github/workflows/ci-tests.yml
index fbe7ea5..a783e40 100644
--- a/.github/workflows/ci-tests.yml
+++ b/.github/workflows/ci-tests.yml
@@ -52,7 +52,7 @@ jobs:
             codecov: "codecov"
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       with:
         fetch-depth: 0
 
diff --git a/.github/workflows/ci-wheels.yml b/.github/workflows/ci-wheels.yml
index e20ac55..9e5d009 100644
--- a/.github/workflows/ci-wheels.yml
+++ b/.github/workflows/ci-wheels.yml
@@ -43,12 +43,12 @@ jobs:
             arch: "AMD64"
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       with:
         fetch-depth: 0
 
     - name: "build ${{ matrix.os }} (${{ matrix.arch }}) wheels"
-      uses: pypa/cibuildwheel@v3.1.2
+      uses: pypa/cibuildwheel@v3.1.3
       env:
         CIBW_SKIP: "cp39-* cp310-* cp314-* pp* *-musllinux*"
         CIBW_ARCHS: ${{ matrix.arch }}
@@ -69,7 +69,7 @@ jobs:
     name: "Build sdist"
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       with:
         fetch-depth: 0
 
@@ -89,7 +89,7 @@ jobs:
     name: "Show artifacts"
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/download-artifact@v4
+    - uses: actions/download-artifact@v5
       with:
         merge-multiple: true
         path: ${{ github.workspace }}/dist
@@ -106,7 +106,7 @@ jobs:
     # upload to Test PyPI for every commit on main branch
     if: github.event_name == 'push' && github.event.ref == 'refs/heads/main'
     steps:
-    - uses: actions/download-artifact@v4
+    - uses: actions/download-artifact@v5
       with:
         merge-multiple: true
         path: ${{ github.workspace }}/dist
@@ -127,7 +127,7 @@ jobs:
     # upload to PyPI for every tag starting with 'v'
     if: github.event_name == 'push' && startsWith(github.event.ref, 'refs/tags/v')
     steps:
-    - uses: actions/download-artifact@v4
+    - uses: actions/download-artifact@v5
       with:
         merge-multiple: true
         path: ${{ github.workspace }}/dist