diff --git a/.github/workflows/branchbuild.yml b/.github/workflows/branchbuild.yml
index 2cccaaaf..4bd70b49 100644
--- a/.github/workflows/branchbuild.yml
+++ b/.github/workflows/branchbuild.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: "ubuntu-latest"
 
     steps:
-      - uses: "actions/checkout@v4"
+      - uses: "actions/checkout@v5"
         with:
           submodules: 'true'
 
@@ -50,7 +50,7 @@ jobs:
     runs-on: "ubuntu-latest"
 
     steps:
-      - uses: "actions/checkout@v4"
+      - uses: "actions/checkout@v5"
 
       - uses: "actions/setup-python@v5"
         with:
@@ -94,7 +94,7 @@ jobs:
     runs-on: "ubuntu-latest"
 
     steps:
-      - uses: "actions/checkout@v4"
+      - uses: "actions/checkout@v5"
 
       - uses: "actions/setup-python@v5"
         with:
@@ -143,7 +143,7 @@ jobs:
         os: [ubuntu-latest, windows-latest, macos-13]
 
     steps:
-      - uses: "actions/checkout@v4"
+      - uses: "actions/checkout@v5"
         with:
           submodules: 'true'
       - uses: "actions/setup-python@v5"
@@ -194,11 +194,11 @@ jobs:
     name: "Test sse2 code on Linux (gcc)"
     runs-on: ubuntu-latest
     steps:
-      - uses: "actions/checkout@v4"
+      - uses: "actions/checkout@v5"
         with:
           submodules: 'true'
 
-      - uses: "actions/checkout@v4"
+      - uses: "actions/checkout@v5"
         with:
           repository: rapidfuzz/intel-sde
           path: sde
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index abf6951a..7aa7fcf2 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -10,7 +10,7 @@ jobs:
     name: "Generate coverage report for tests"
     runs-on: ubuntu-latest
     steps:
-      - uses: "actions/checkout@v4"
+      - uses: "actions/checkout@v5"
         with:
           submodules: 'true'
       - uses: "actions/setup-python@v5"
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 23e9667f..90dbb8fc 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -22,7 +22,7 @@ jobs:
   build:
     runs-on: [ubuntu-latest]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           submodules: 'true'
       - uses: actions/setup-python@v5
diff --git a/.github/workflows/releasebuild.yml b/.github/workflows/releasebuild.yml
index 8011b962..6e274baa 100644
--- a/.github/workflows/releasebuild.yml
+++ b/.github/workflows/releasebuild.yml
@@ -12,7 +12,7 @@ jobs:
     name: Build source distribution
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           submodules: 'true'
       - uses: actions/setup-python@v5
@@ -67,7 +67,7 @@ jobs:
       CIBW_BUILD_VERBOSITY: 3
 
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v5
         with:
           name: artifact-sdist
           path: dist
@@ -78,7 +78,7 @@ jobs:
       - uses: actions/setup-python@v5
 
       - name: Build wheels
-        uses: pypa/cibuildwheel@v2.23.3
+        uses: pypa/cibuildwheel@v3.1.3
         with:
           package-dir: rapidfuzz.tar.gz
           output-dir: wheelhouse
@@ -103,7 +103,7 @@ jobs:
       CIBW_BUILD_VERBOSITY: 3
 
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v5
         with:
           name: artifact-sdist
           path: dist
@@ -114,7 +114,7 @@ jobs:
         run: cp dist/*.tar.gz rapidfuzz.tar.gz
 
       - name: Build wheels
-        uses: pypa/cibuildwheel@v2.23.3
+        uses: pypa/cibuildwheel@v3.1.3
         with:
           package-dir: rapidfuzz.tar.gz
           output-dir: wheelhouse
@@ -155,7 +155,7 @@ jobs:
       CIBW_BUILD_VERBOSITY: 3
 
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v5
         with:
           name: artifact-sdist
           path: dist
@@ -174,7 +174,7 @@ jobs:
           image: tonistiigi/binfmt:qemu-v8.1.5
 
       - name: Build wheel
-        uses: pypa/cibuildwheel@v2.23.3
+        uses: pypa/cibuildwheel@v3.1.3
         with:
           package-dir: rapidfuzz.tar.gz
           output-dir: wheelhouse
@@ -194,7 +194,7 @@ jobs:
       CIBW_BUILD_VERBOSITY: 3
 
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v5
         with:
           name: artifact-sdist
           path: dist
@@ -207,7 +207,7 @@ jobs:
         run: cp dist/*.tar.gz rapidfuzz.tar.gz
 
       - name: Build wheel
-        uses: pypa/cibuildwheel@v2.23.3
+        uses: pypa/cibuildwheel@v3.1.3
         with:
           package-dir: rapidfuzz.tar.gz
           output-dir: wheelhouse
@@ -227,7 +227,7 @@ jobs:
     permissions:
       id-token: write
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v5
         with:
           path: dist
           pattern: artifact-*
diff --git a/.github/workflows/submodule.yml b/.github/workflows/submodule.yml
index 2b556af5..c5a9ba0a 100644
--- a/.github/workflows/submodule.yml
+++ b/.github/workflows/submodule.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: "actions/checkout@v4"
+      - uses: "actions/checkout@v5"
         with:
           submodules: 'true'
       # checkout never fetches tags for submodules so do it manually