diff --git a/.github/workflows/native.yml b/.github/workflows/native.yml
index 7784a00..64f0015 100644
--- a/.github/workflows/native.yml
+++ b/.github/workflows/native.yml
@@ -48,9 +48,10 @@ jobs:
             .build/handoff/pages/*.log
       - name: Package qualified documentation site
         if: matrix.lane == 'docs'
-        uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v4
+        uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5
         with:
           path: .build/handoff/pages/site
+          include-hidden-files: true # Preserve the verified .nojekyll file; only the generated site is uploaded.
   publish:
     name: Documentation / publish
     if: github.ref == 'refs/heads/main' && github.event_name != 'pull_request'
@@ -71,7 +72,7 @@ jobs:
       url: ${{ steps.deployment.outputs.page_url }}
     steps:
       - name: Configure Pages
-        uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
+        uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6
       - name: Publish qualified documentation
         id: deployment
-        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4
+        uses: actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346 # v5.0.1