diff --git a/.github/workflows/publish-docs.yml b/.github/workflows/publish-docs.yml
index 30d33da0..ed7c11b8 100644
--- a/.github/workflows/publish-docs.yml
+++ b/.github/workflows/publish-docs.yml
@@ -29,7 +29,7 @@ jobs:
       run: |
         env | sort | grep hklpy
 
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
 
     - name: Install Python ${{ matrix.python-version }} Conda environment with micromamba from env-dev.yml
       uses: mamba-org/provision-with-micromamba@main
diff --git a/.github/workflows/upload_pypi.yml b/.github/workflows/upload_pypi.yml
index f83e96f8..a8e0ea39 100644
--- a/.github/workflows/upload_pypi.yml
+++ b/.github/workflows/upload_pypi.yml
@@ -47,7 +47,7 @@ jobs:
     # TODO: restrict to tags on main branch only?
     - name: Publish distribution 📦 to PyPI
       if: startsWith(github.ref, 'refs/tags')
-      uses: pypa/gh-action-pypi-publish@master
+      uses: pypa/gh-action-pypi-publish@release/v1
       with:
         user: __token__
         password: ${{ secrets.PYPI_API_TOKEN }}