diff --git a/.github/workflows/cd-python.yaml b/.github/workflows/cd-python.yaml
index 33a0186f..bbcb3b01 100644
--- a/.github/workflows/cd-python.yaml
+++ b/.github/workflows/cd-python.yaml
@@ -57,7 +57,7 @@ jobs:
           sccache: 'true'
           manylinux: auto
       - name: Upload wheels
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: wheels-linux-${{ matrix.platform.target }}
           path: dist
@@ -98,7 +98,7 @@ jobs:
           sccache: 'true'
           manylinux: musllinux_1_2
       - name: Upload wheels
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: wheels-musllinux-${{ matrix.platform.target }}
           path: dist
@@ -135,7 +135,7 @@ jobs:
           args: --release --out dist --manifest-path ${{ env.MATURIN_MANIFEST_PATH }}
           sccache: 'true'
       - name: Upload wheels
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: wheels-windows-${{ matrix.platform.target }}
           path: dist
@@ -171,7 +171,7 @@ jobs:
           args: --release --out dist --manifest-path ${{ env.MATURIN_MANIFEST_PATH }}
           sccache: 'true'
       - name: Upload wheels
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: wheels-macos-${{ matrix.platform.target }}
           path: dist
@@ -199,7 +199,7 @@ jobs:
           command: sdist
           args: --out dist --manifest-path ${{ env.MATURIN_MANIFEST_PATH }}
       - name: Upload sdist
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: wheels-sdist
           path: dist
@@ -221,9 +221,9 @@ jobs:
       # Used to generate artifact attestation
       attestations: write
     steps:
-      - uses: actions/download-artifact@v7
+      - uses: actions/download-artifact@v8
       - name: Generate artifact attestation
-        uses: actions/attest-build-provenance@v3
+        uses: actions/attest-build-provenance@v4
         with:
           subject-path: 'wheels-*/*'
       - name: Log version being published
@@ -252,9 +252,9 @@ jobs:
       # Used to generate artifact attestation
       attestations: write
     steps:
-      - uses: actions/download-artifact@v7
+      - uses: actions/download-artifact@v8
       - name: Generate artifact attestation
-        uses: actions/attest-build-provenance@v3
+        uses: actions/attest-build-provenance@v4
         with:
           subject-path: 'wheels-*/*'
       - name: Log version being published
diff --git a/.github/workflows/cd-r.yaml b/.github/workflows/cd-r.yaml
index f40434d2..c990da66 100644
--- a/.github/workflows/cd-r.yaml
+++ b/.github/workflows/cd-r.yaml
@@ -57,7 +57,7 @@ jobs:
         run: |
           move dist\*.zip dist\phylo2vec_${{ steps.determine-version.outputs.version }}_windows.zip
       - name: Upload package
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: r-package-windows
           path: dist/*.zip
@@ -106,7 +106,7 @@ jobs:
         run: |
           mv dist/*.tgz dist/phylo2vec_${{ steps.determine-version.outputs.version }}_macos-${{ matrix.platform.target }}.tgz
       - name: Upload package
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: r-package-macos-${{ matrix.platform.target }}
           path: dist/*.tgz
@@ -151,7 +151,7 @@ jobs:
         run: |
           mv dist/*.tar.gz dist/phylo2vec_${{ steps.determine-version.outputs.version }}_linux-x86_64.tar.gz
       - name: Upload package
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: r-package-linux
           path: dist/*.tar.gz
@@ -167,9 +167,9 @@ jobs:
       contents: write
       attestations: write
     steps:
-      - uses: actions/download-artifact@v7
+      - uses: actions/download-artifact@v8
       - name: Generate artifact attestation
-        uses: actions/attest-build-provenance@v3
+        uses: actions/attest-build-provenance@v4
         with:
           subject-path: 'r-package-*/*'
       - name: Set up R
@@ -196,9 +196,9 @@ jobs:
       contents: write
       attestations: write
     steps:
-      - uses: actions/download-artifact@v7
+      - uses: actions/download-artifact@v8
       - name: Generate artifact attestation
-        uses: actions/attest-build-provenance@v3
+        uses: actions/attest-build-provenance@v4
         with:
           subject-path: 'r-package-*/*'
       - name: Set up R
diff --git a/.github/workflows/draft-pdf.yml b/.github/workflows/draft-pdf.yml
index d3a58fb5..d85d3b0a 100644
--- a/.github/workflows/draft-pdf.yml
+++ b/.github/workflows/draft-pdf.yml
@@ -19,7 +19,7 @@ jobs:
           # This should be the path to the paper within your repo.
           paper-path: joss/paper.md
       - name: Upload
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: paper
           # This is the output path where Pandoc will write the compiled