diff --git a/.github/workflows/build_wheels.yml b/.github/workflows/build_wheels.yml
index dcab79e26..15437c8ae 100644
--- a/.github/workflows/build_wheels.yml
+++ b/.github/workflows/build_wheels.yml
@@ -82,12 +82,12 @@ jobs:
           oldest_sympy: '1.10'
 
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.2
         with:
           submodules: "recursive"
 
       - name: Build wheels
-        uses: pypa/cibuildwheel@v2.19.2
+        uses: pypa/cibuildwheel@v2.22.0
         env:
           CIBW_BUILD: "${{ matrix.python.version }}-*"
           CIBW_SKIP: "{pp*,*-musllinux_*}"
@@ -115,7 +115,7 @@ jobs:
             matplotlib==${{ matrix.python.oldest_matplotlib }}
           CIBW_TEST_COMMAND: "cd {package}/tests && pytest . -v --log-level=DEBUG"
 
-      - uses: actions/upload-artifact@v4.3.4
+      - uses: actions/upload-artifact@v4.4.3
         with:
           name: dist-${{ matrix.os.base }}-${{ matrix.os.version }}-${{ matrix.python.version }}
           path: ./wheelhouse/*.whl
@@ -125,11 +125,11 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ contains(github.event.pull_request.labels.*.name, 'build_wheels') || github.event_name != 'pull_request' }}
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.2
         with:
           submodules: "recursive"
 
-      - uses: actions/setup-python@v5.1.1
+      - uses: actions/setup-python@v5.3.0
         name: Install Python
         with:
           python-version: '3.12'
@@ -143,7 +143,7 @@ jobs:
       - name: Build sdist
         run: python -m build --sdist --outdir dist/ .
 
-      - uses: actions/upload-artifact@v4.3.4
+      - uses: actions/upload-artifact@v4.4.3
         with:
           name: dist-sdist
           path: dist/*.tar.gz
@@ -169,7 +169,7 @@ jobs:
       - name: Upload to PyPI
         # upload to PyPI on every tag starting with 'v'
         if: startsWith(github.ref, 'refs/tags/v')
-        uses: pypa/gh-action-pypi-publish@v1.9.0
+        uses: pypa/gh-action-pypi-publish@v1.12.2
         with:
           user: __token__
           password: ${{ secrets.PYPI_API_TOKEN }}
diff --git a/.github/workflows/run_tests.yml b/.github/workflows/run_tests.yml
index 5c2a8cee1..8c68a28fc 100644
--- a/.github/workflows/run_tests.yml
+++ b/.github/workflows/run_tests.yml
@@ -42,12 +42,12 @@ jobs:
 
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v4.1.7
+        uses: actions/checkout@v4.2.2
         with:
           submodules: true
 
       - name: Create Python Environment
-        uses: mamba-org/setup-micromamba@v1.9.0
+        uses: mamba-org/setup-micromamba@v2.0.2
         with:
           micromamba-version: '1.5.8-0'
           environment-name: test
diff --git a/.github/workflows/style_check.yml b/.github/workflows/style_check.yml
index 325a555da..21342da2c 100644
--- a/.github/workflows/style_check.yml
+++ b/.github/workflows/style_check.yml
@@ -23,7 +23,7 @@ jobs:
     container:
       image: glotzerlab/ci:2021.11-clang10_py38
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.2
         with:
           submodules: true
       - name: Install pre-commit
diff --git a/.github/workflows/update-conda-lockfiles.yaml b/.github/workflows/update-conda-lockfiles.yaml
index f8989e175..a93fecbe6 100644
--- a/.github/workflows/update-conda-lockfiles.yaml
+++ b/.github/workflows/update-conda-lockfiles.yaml
@@ -8,7 +8,7 @@ on:
 
 jobs:
   update:
-    uses: glotzerlab/workflows/.github/workflows/update-conda-lockfiles.yaml@ea2e25d07af862a1c696a932c2bd6b242d142049 # 0.2.0
+    uses: glotzerlab/workflows/.github/workflows/update-conda-lockfiles.yaml@1747bc5c994ec280440dd051f2928791407692c8 # 0.5.1
     secrets: inherit
     with:
       branch: main