diff --git a/.github/workflows/python-publish.yml b/.github/workflows/python-publish.yml
index 2186593..7428691 100644
--- a/.github/workflows/python-publish.yml
+++ b/.github/workflows/python-publish.yml
@@ -13,9 +13,9 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Set up Python
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v4
       with:
         python-version: '3.x'
     - name: Install dependencies
@@ -26,7 +26,7 @@ jobs:
       run: |
         python setup.py sdist bdist_wheel
     - name: Publish a Python distribution to PyPI
-      uses: pypa/gh-action-pypi-publish@master
+      uses: pypa/gh-action-pypi-publish@release/v1
       with:
         user: __token__
         password: ${{ secrets.pypi_password }}
diff --git a/.github/workflows/tar-publish.yml b/.github/workflows/tar-publish.yml
index fd26f4b..1f6841d 100644
--- a/.github/workflows/tar-publish.yml
+++ b/.github/workflows/tar-publish.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
       - name: Archive
         run: tar --exclude=".git" --exclude="picosnitch.tar.gz" -czf - * > picosnitch.tar.gz
       - name: Hash
@@ -19,4 +19,3 @@ jobs:
         if: startsWith(github.ref, 'refs/tags/')
         with:
           files: picosnitch.tar.gz
-