diff --git a/.github/actions/package-archive-build/action.yml b/.github/actions/package-archive-build/action.yml
index 573636993..a9f6ccd5e 100644
--- a/.github/actions/package-archive-build/action.yml
+++ b/.github/actions/package-archive-build/action.yml
@@ -67,13 +67,13 @@ runs:
         github-token: ""
 
     - name: Cache Nix store + flake eval
-      uses: DeterminateSystems/magic-nix-cache-action@565684385bcd71bad329742eefe8d12f2e765b39 # v13
+      uses: DeterminateSystems/magic-nix-cache-action@908b263ff629f4cc17666315b7fd3ec127c6244d # v14
       with:
         use-gha-cache: false
         use-flakehub: false
 
     - name: Download toolchain sysroots artifact
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v8
       with:
         name: toolchain-sysroots
         path: ${{ runner.temp }}/toolchain
@@ -206,7 +206,7 @@ runs:
         echo "archive-name=$archive_name" >> "$GITHUB_OUTPUT"
 
     - name: Upload archive as workflow artifact
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: ${{ inputs.package }}-${{ inputs.arch }}
         path: ${{ runner.temp }}/staged/*.tar.zst
diff --git a/.github/actions/package-toolchain/action.yml b/.github/actions/package-toolchain/action.yml
index f5915dea8..89f3c171d 100644
--- a/.github/actions/package-toolchain/action.yml
+++ b/.github/actions/package-toolchain/action.yml
@@ -20,7 +20,7 @@ runs:
         github-token: ""
 
     - name: Cache Nix store + flake eval
-      uses: DeterminateSystems/magic-nix-cache-action@565684385bcd71bad329742eefe8d12f2e765b39 # v13
+      uses: DeterminateSystems/magic-nix-cache-action@908b263ff629f4cc17666315b7fd3ec127c6244d # v14
       with:
         use-gha-cache: false
         use-flakehub: false
@@ -36,7 +36,7 @@ runs:
         echo "toolchain-cache key: $KEY"
 
     - name: Cache musl sysroot + libc++
-      uses: actions/cache@v4
+      uses: actions/cache@v5
       id: cache
       with:
         path: |
@@ -78,7 +78,7 @@ runs:
           sysroot sysroot64 tools/bin/wasm-fork-instrument
 
     - name: Upload toolchain sysroots artifact
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: toolchain-sysroots
         path: ${{ runner.temp }}/toolchain-sysroots.tar.zst