diff --git a/.github/workflows/ci-locks.yml b/.github/workflows/ci-locks.yml
index f0fbafed..c45191e5 100644
--- a/.github/workflows/ci-locks.yml
+++ b/.github/workflows/ci-locks.yml
@@ -85,7 +85,7 @@ jobs:
 
     - name: "Push pull-request"
       id: cpr
-      uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0
+      uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1
       with:
         token: ${{ steps.generate-token.outputs.token }}
         add-paths: |
diff --git a/.github/workflows/ci-manifest.yml b/.github/workflows/ci-manifest.yml
index 2751e778..7dc2d5c0 100644
--- a/.github/workflows/ci-manifest.yml
+++ b/.github/workflows/ci-manifest.yml
@@ -23,4 +23,4 @@ concurrency:
 jobs:
   manifest:
     name: "check-manifest"
-    uses: scitools/workflows/.github/workflows/ci-manifest.yml@2026.03.4
+    uses: scitools/workflows/.github/workflows/ci-manifest.yml@2026.04.2
diff --git a/.github/workflows/ci-template-check.yml b/.github/workflows/ci-template-check.yml
index 46cb96ce..b98172dd 100644
--- a/.github/workflows/ci-template-check.yml
+++ b/.github/workflows/ci-template-check.yml
@@ -10,7 +10,7 @@ on:
 
 jobs:
   prompt-share:
-    uses: scitools/workflows/.github/workflows/ci-template-check.yml@2026.03.4
+    uses: scitools/workflows/.github/workflows/ci-template-check.yml@2026.04.2
     secrets: inherit
     with:
       pr_number: ${{ github.event.pull_request.number }}
diff --git a/.github/workflows/ci-tests.yml b/.github/workflows/ci-tests.yml
index 132fe48b..cb89ee12 100644
--- a/.github/workflows/ci-tests.yml
+++ b/.github/workflows/ci-tests.yml
@@ -59,7 +59,7 @@ jobs:
     # so we need to prepare environment variables for it
     - name: Export environment variables for UDUNITS2 lookup
       if: runner.os == 'Windows'
-      uses: actions/github-script@v8
+      uses: actions/github-script@v9
       with:
         script: |
           const path = require('path')
diff --git a/.github/workflows/ci-wheels.yml b/.github/workflows/ci-wheels.yml
index 2c91c8df..6b76c980 100644
--- a/.github/workflows/ci-wheels.yml
+++ b/.github/workflows/ci-wheels.yml
@@ -83,7 +83,7 @@ jobs:
 
     - name: "Conda install"
       if: runner.os == 'Windows'
-      uses: conda-incubator/setup-miniconda@v3
+      uses: conda-incubator/setup-miniconda@v4
       with:
         miniforge-version: latest
         channels: conda-forge
@@ -96,7 +96,7 @@ jobs:
       run: conda install udunits2
 
     - name: "Building ${{ matrix.os }} (${{ matrix.arch }}) wheels"
-      uses: pypa/cibuildwheel@v3.4.0
+      uses: pypa/cibuildwheel@v3.4.1
       env:
         CIBW_ENVIRONMENT: CF_UNITS_LIMITED_API="1"
         CIBW_SKIP: "pp* *-musllinux*"