diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5b77653..d28a84f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -41,7 +41,7 @@ jobs:
       - run: npm run test:coverage
       - name: Upload coverage to Codecov
         if: matrix.os == 'ubuntu-latest' && matrix.node == 22
-        uses: codecov/codecov-action@v6
+        uses: codecov/codecov-action@v7
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: ./coverage/lcov.info
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 42999c3..3ad0599 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -74,17 +74,17 @@ jobs:
         id: ver
         run: echo "v=${GITHUB_REF_NAME#v}" >> "$GITHUB_OUTPUT"
 
-      - uses: docker/setup-qemu-action@v3 # cross-build arm64
+      - uses: docker/setup-qemu-action@v4 # cross-build arm64
 
-      - uses: docker/setup-buildx-action@v3
+      - uses: docker/setup-buildx-action@v4
 
-      - uses: docker/login-action@v3
+      - uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: docker/build-push-action@v6
+      - uses: docker/build-push-action@v7
         with:
           context: .
           push: true