diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 0ea2805..0299cac 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -19,7 +19,7 @@ jobs:
     runs-on: windows-latest
 
     steps:
-    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       with:
         persist-credentials: false
 
@@ -41,7 +41,7 @@ jobs:
     # We move faster than GitHub's Python runtimes, so use NuGet instead
     # One day we can use ourselves to download Python, but not yet...
     - name: Set up NuGet
-      uses: nuget/setup-nuget@323ab0502cd38fdc493335025a96c8fdb0edc71f # v2.0.1
+      uses: nuget/setup-nuget@12c57947e9458a5b976961b08ea0706a17dd71ae # v3.0.0
 
     - name: Set up Python 3.14.3
       run: |
@@ -77,7 +77,7 @@ jobs:
           --cov-report xml
 
     - name: 'Upload coverage'
-      uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
+      uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
       with:
         token: ${{ secrets.CODECOV_ORG_TOKEN }}