diff --git a/.github/workflows/cargo-test.yml b/.github/workflows/cargo-test.yml
index 01c17fa..b27c52a 100644
--- a/.github/workflows/cargo-test.yml
+++ b/.github/workflows/cargo-test.yml
@@ -43,7 +43,7 @@ jobs:
         run: |
           cargo llvm-cov nextest --all --lcov --output-path lcov.info --test-threads=1 --no-fail-fast
       - name: Upload to codecov.io
-        uses: codecov/codecov-action@v5.1.1
+        uses: codecov/codecov-action@v5.5.0
         with:
           slug: KittyCAD/machine-api
           token: ${{secrets.CODECOV_TOKEN}}
diff --git a/.github/workflows/make-release.yml b/.github/workflows/make-release.yml
index e969714..68939a5 100644
--- a/.github/workflows/make-release.yml
+++ b/.github/workflows/make-release.yml
@@ -15,7 +15,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: 'Authenticate to Google Cloud'
-        uses: 'google-github-actions/auth@v2.1.7'
+        uses: 'google-github-actions/auth@v2.1.12'
         with:
           credentials_json: '${{ secrets.GOOGLE_CLOUD_DL_SA }}'
       - name: Set up Cloud SDK
@@ -70,7 +70,7 @@ jobs:
           cp cross/README.md cross/${{matrix.os}}-${{github.ref_name}}-README.md
       - name: 'upload binary files'
         id: upload-files
-        uses: google-github-actions/upload-cloud-storage@v2.2.1
+        uses: google-github-actions/upload-cloud-storage@v2.2.3
         with:
           path: releases
           destination: dl.kittycad.io
diff --git a/.github/workflows/validate-openapi-spec.yml b/.github/workflows/validate-openapi-spec.yml
index 70a0e27..3b7afb9 100644
--- a/.github/workflows/validate-openapi-spec.yml
+++ b/.github/workflows/validate-openapi-spec.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4.1.0
+      - uses: actions/setup-node@v4.4.0
         with:
           node-version: '18'
       - name: Install our tools