diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 4b563c59..4a8436b6 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -29,7 +29,7 @@ jobs:
                   role-session-name: ocr-etl-role-session
                   aws-region: us-west-2
 
-            - uses: prefix-dev/setup-pixi@v0.9.5
+            - uses: prefix-dev/setup-pixi@v0.9.6
               with:
                   activate-environment: true
                   environments: dev
@@ -49,7 +49,7 @@ jobs:
                   echo "PYTHON=$(pixi run --environment dev python -c 'import sys; print(f"{sys.version_info.major}.{sys.version_info.minor}")')" >> $GITHUB_ENV
 
             - name: Upload code coverage to Codecov
-              uses: codecov/codecov-action@v6.0.0
+              uses: codecov/codecov-action@v6.0.1
               with:
                   token: ${{ secrets.CODECOV_TOKEN }}
                   files: ./coverage.xml
@@ -82,7 +82,7 @@ jobs:
                   role-session-name: ocr-etl-role-session
                   aws-region: us-west-2
 
-            - uses: prefix-dev/setup-pixi@v0.9.5
+            - uses: prefix-dev/setup-pixi@v0.9.6
               with:
                   cache: false # no pixi.lock
                   locked: false
@@ -104,7 +104,7 @@ jobs:
                   echo "PYTHON=$(pixi run --environment dev python -c 'import sys; print(f"{sys.version_info.major}.{sys.version_info.minor}")')" >> $GITHUB_ENV
 
             - name: Upload code coverage to Codecov (integration)
-              uses: codecov/codecov-action@v6.0.0
+              uses: codecov/codecov-action@v6.0.1
               if: success()
               with:
                   # token: ${{ secrets.CODECOV_TOKEN }}  # uncomment if repository is private
diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index 71620d49..e6e00adc 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -67,7 +67,7 @@ jobs:
                   ref: ${{ github.event.inputs.production_tag || github.event.release.tag_name || github.sha }}
 
             - name: Setup Pixi (deploy env)
-              uses: prefix-dev/setup-pixi@v0.9.5
+              uses: prefix-dev/setup-pixi@v0.9.6
               with:
                   cache: false
                   locked: false
@@ -141,7 +141,7 @@ jobs:
                   role-session-name: ocr-etl-role-session
                   aws-region: us-west-2
 
-            - uses: prefix-dev/setup-pixi@v0.9.5
+            - uses: prefix-dev/setup-pixi@v0.9.6
               with:
                   cache: false
                   locked: false
@@ -190,7 +190,7 @@ jobs:
                   role-session-name: ocr-etl-role-session
                   aws-region: us-west-2
 
-            - uses: prefix-dev/setup-pixi@v0.9.5
+            - uses: prefix-dev/setup-pixi@v0.9.6
               with:
                   cache: false
                   locked: false
@@ -263,7 +263,7 @@ jobs:
                   role-session-name: ocr-etl-role-session
                   aws-region: us-west-2
 
-            - uses: prefix-dev/setup-pixi@v0.9.5
+            - uses: prefix-dev/setup-pixi@v0.9.6
               with:
                   cache: false
                   locked: false
@@ -359,7 +359,7 @@ jobs:
                   aws-region: us-west-2
                   role-duration-seconds: 12000
 
-            - uses: prefix-dev/setup-pixi@v0.9.5
+            - uses: prefix-dev/setup-pixi@v0.9.6
               with:
                   cache: false
                   locked: false
@@ -462,7 +462,7 @@ jobs:
                   aws-region: us-west-2
                   role-duration-seconds: 12000
 
-            - uses: prefix-dev/setup-pixi@v0.9.5
+            - uses: prefix-dev/setup-pixi@v0.9.6
               with:
                   cache: false
                   locked: false