diff --git a/.github/workflows/ci_workflows.yml b/.github/workflows/ci_workflows.yml
index 2909574..839b262 100644
--- a/.github/workflows/ci_workflows.yml
+++ b/.github/workflows/ci_workflows.yml
@@ -35,7 +35,7 @@ jobs:
 
   tests:
     needs: initial_checks
-    uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@d68193b68216da64eafaa618f53c59f5d271c56e  # v1.14.0
+    uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@8c0fde6f7e926df6ed7057255d29afa9c1ad5320  # v1.16.0
     with:
       setenv: |
         jref: "https://ssb.stsci.edu/trds_open/jref"
diff --git a/.github/workflows/predeps_workflows.yml b/.github/workflows/predeps_workflows.yml
index ca316dd..4493a4f 100644
--- a/.github/workflows/predeps_workflows.yml
+++ b/.github/workflows/predeps_workflows.yml
@@ -12,7 +12,7 @@ permissions:
 
 jobs:
   rc_tests:
-    uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@d68193b68216da64eafaa618f53c59f5d271c56e  # v1.14.0
+    uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@8c0fde6f7e926df6ed7057255d29afa9c1ad5320  # v1.16.0
     with:
       setenv: |
         jref: "https://ssb.stsci.edu/trds_open/jref"
diff --git a/.github/workflows/publish-to-pypi.yml b/.github/workflows/publish-to-pypi.yml
index 249610f..be6b1a1 100644
--- a/.github/workflows/publish-to-pypi.yml
+++ b/.github/workflows/publish-to-pypi.yml
@@ -36,7 +36,7 @@ jobs:
       with:
         fetch-depth: 0
 
-    - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b  # v5.3.0
+    - uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38  # v5.4.0
       with:
         python-version: '3.11'
 
@@ -56,7 +56,7 @@ jobs:
     # Use appropriate token if debugging with TestPyPI
     - name: Publish distribution 📦 to PyPI
       if: (startsWith(github.ref, 'refs/tags/') && github.event_name == 'push')
-      uses: pypa/gh-action-pypi-publish@15c56dba361d8335944d31a2ecd17d700fc7bcbc  # v1.12.2
+      uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc  # v1.12.4
       with:
         user: __token__
         password: ${{ secrets.PYPI_TOKEN }}