diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index c799dcbc..3b248aeb 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -12,7 +12,7 @@ jobs:
         operating-system: [ubuntu-22.04, ubuntu-24.04, ubuntu-24.04-arm, macos-13, macos-14]
     timeout-minutes: 90
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Set OS-specific variables
         id: vars
diff --git a/.github/workflows/tests_nix.yml b/.github/workflows/tests_nix.yml
index 20355d74..73385db2 100644
--- a/.github/workflows/tests_nix.yml
+++ b/.github/workflows/tests_nix.yml
@@ -13,14 +13,14 @@ jobs:
     test-examples:
         runs-on: [ubuntu-22.04]
         steps:
-            - uses: actions/checkout@v3
+            - uses: actions/checkout@v4
 
             # install nix
-            - uses: cachix/install-nix-action@v23
+            - uses: cachix/install-nix-action@02a151ada4993995686f9ed4f1be7cfbb229e56f # commit for v31
               with:
                 nix_path: nixpkgs=channel:nixos-unstable
 
-            - uses: cachix/cachix-action@v12
+            - uses: cachix/cachix-action@0fc020193b5a1fa3ac4575aa3a7d3aa6a35435ad # commit for v16
               with:
                   name: enigmaticsunrise
                   authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
diff --git a/flake.lock b/flake.lock
index a898ba5c..b7f60832 100644
--- a/flake.lock
+++ b/flake.lock
@@ -52,31 +52,6 @@
         "type": "github"
       }
     },
-    "nixgl": {
-      "inputs": {
-        "flake-utils": [
-          "roc",
-          "flake-utils"
-        ],
-        "nixpkgs": [
-          "roc",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1713543440,
-        "narHash": "sha256-lnzZQYG0+EXl/6NkGpyIz+FEOc/DSEG57AP1VsdeNrM=",
-        "owner": "guibou",
-        "repo": "nixGL",
-        "rev": "310f8e49a149e4c9ea52f1adf70cdc768ec53f8a",
-        "type": "github"
-      },
-      "original": {
-        "owner": "guibou",
-        "repo": "nixGL",
-        "type": "github"
-      }
-    },
     "nixpkgs": {
       "locked": {
         "lastModified": 1722403750,
@@ -97,16 +72,15 @@
       "inputs": {
         "flake-compat": "flake-compat",
         "flake-utils": "flake-utils_2",
-        "nixgl": "nixgl",
         "nixpkgs": "nixpkgs",
         "rust-overlay": "rust-overlay"
       },
       "locked": {
-        "lastModified": 1738058275,
-        "narHash": "sha256-k3iYD2UNGPkbGePM45mWMGwp1N4uLuPWw0P/tDThLO4=",
+        "lastModified": 1742267068,
+        "narHash": "sha256-FPGVgKfvA0DJTPPVE9Zf/IpZ3pJPilEyy5wWxiqgGh4=",
         "owner": "roc-lang",
         "repo": "roc",
-        "rev": "0e35e33f85342e2c2dda3f8e6e5414719293d759",
+        "rev": "b9de635b90edb12c8497e64951e6a90b42c35bb2",
         "type": "github"
       },
       "original": {