diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 05ed6217..cd2df78f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -30,7 +30,7 @@ jobs:
 
       - name: Upload packages to Jazzband
         if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
-        uses: pypa/gh-action-pypi-publish@v1.11.0
+        uses: pypa/gh-action-pypi-publish@v1.12.2
         with:
           user: jazzband
           password: ${{ secrets.JAZZBAND_RELEASE_KEY }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 93401da6..21db71fb 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -49,6 +49,6 @@ jobs:
         tox -v
 
     - name: Upload coverage
-      uses: codecov/codecov-action@v4
+      uses: codecov/codecov-action@v5
       with:
         name: Python ${{ matrix.python-version }}