diff --git a/.github/workflows/branchbuild.yml b/.github/workflows/branchbuild.yml
index 4bcff233..f8d053a3 100644
--- a/.github/workflows/branchbuild.yml
+++ b/.github/workflows/branchbuild.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: "ubuntu-latest"
 
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
         with:
           submodules: 'true'
 
@@ -50,7 +50,7 @@ jobs:
     runs-on: "ubuntu-latest"
 
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
 
       - uses: "actions/setup-python@v6"
         with:
@@ -94,7 +94,7 @@ jobs:
     runs-on: "ubuntu-latest"
 
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
 
       - uses: "actions/setup-python@v6"
         with:
@@ -146,7 +146,7 @@ jobs:
             os: windows-11-arm
 
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
         with:
           submodules: 'true'
       - uses: "actions/setup-python@v6"
@@ -197,11 +197,11 @@ jobs:
     name: "Test sse2 code on Linux (gcc)"
     runs-on: ubuntu-latest
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
         with:
           submodules: 'true'
 
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
         with:
           repository: rapidfuzz/intel-sde
           path: sde
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 6902b863..c36a4fdc 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -10,7 +10,7 @@ jobs:
     name: "Generate coverage report for tests"
     runs-on: ubuntu-latest
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
         with:
           submodules: 'true'
       - uses: "actions/setup-python@v6"
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 8fe827cc..3f4c525b 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -22,7 +22,7 @@ jobs:
   build:
     runs-on: [ubuntu-latest]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           submodules: 'true'
       - uses: actions/setup-python@v6
diff --git a/.github/workflows/releasebuild.yml b/.github/workflows/releasebuild.yml
index 57dae1b0..3e5bed7b 100644
--- a/.github/workflows/releasebuild.yml
+++ b/.github/workflows/releasebuild.yml
@@ -12,7 +12,7 @@ jobs:
     name: Build source distribution
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           submodules: 'true'
       - uses: actions/setup-python@v6
@@ -102,7 +102,7 @@ jobs:
         run: cp dist/*.tar.gz rapidfuzz.tar.gz
 
       - name: Build wheels
-        uses: pypa/cibuildwheel@v3.2.1
+        uses: pypa/cibuildwheel@v3.3.0
         env:
           CIBW_PLATFORM: ${{ matrix.platform || 'auto' }}
           CIBW_ARCHS: ${{ matrix.archs || 'auto' }}
diff --git a/.github/workflows/submodule.yml b/.github/workflows/submodule.yml
index 9859c1aa..28f6ee53 100644
--- a/.github/workflows/submodule.yml
+++ b/.github/workflows/submodule.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
         with:
           submodules: 'true'
       # checkout never fetches tags for submodules so do it manually