diff --git a/.github/workflows/codspeed.yml b/.github/workflows/codspeed.yml
index e35c914dc..2a87362d3 100644
--- a/.github/workflows/codspeed.yml
+++ b/.github/workflows/codspeed.yml
@@ -25,7 +25,7 @@ jobs:
       - name: Install dependencies
         run: uv sync
       - name: Run benchmarks
-        uses: CodSpeedHQ/action@9d332c4d90b43981c3e55ae8e38e68709996240f  # v4.17.0
+        uses: CodSpeedHQ/action@a4a36bb07c0638b0b4ca52bf1f3dad1b4289e52f  # v4.18.1
         with:
           mode: simulation
           run: uv run pytest test/ --codspeed
diff --git a/.github/workflows/pypi-publish.yml b/.github/workflows/pypi-publish.yml
index ea6264ead..fc3c54bb1 100644
--- a/.github/workflows/pypi-publish.yml
+++ b/.github/workflows/pypi-publish.yml
@@ -13,9 +13,9 @@ jobs:
     steps:
       - name: Checkout sources
         uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6.0.3
-      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
+      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1  # v6.3.0
         with:
-          python-version: '3.11'
+          python-version: '3.14'
           cache: 'pip'
       - name: Build taskcluster-taskgraph package distributions
         run: |
@@ -39,9 +39,9 @@ jobs:
     steps:
       - name: Checkout sources
         uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6.0.3
-      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
+      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1  # v6.3.0
         with:
-          python-version: '3.11'
+          python-version: '3.14'
           cache: 'pip'
       - name: Build pytest-taskgraph package distributions
         working-directory: packages/pytest-taskgraph
@@ -62,9 +62,9 @@ jobs:
     steps:
       - name: Checkout sources
         uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6.0.3
-      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
+      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1  # v6.3.0
         with:
-          python-version: '3.11'
+          python-version: '3.14'
           cache: 'pip'
       - name: Build sphinx-taskgraph package distributions
         working-directory: packages/sphinx-taskgraph