diff --git a/.github/workflows/omero_plugin.yml b/.github/workflows/omero_plugin.yml
index f90e1ea9..c698d830 100644
--- a/.github/workflows/omero_plugin.yml
+++ b/.github/workflows/omero_plugin.yml
@@ -23,7 +23,7 @@ jobs:
     env:
       STAGE: cli
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Checkout omero-test-infra
         uses: actions/checkout@master
         with:
diff --git a/.github/workflows/publish_pypi.yml b/.github/workflows/publish_pypi.yml
index 81eccda3..c72c39a5 100644
--- a/.github/workflows/publish_pypi.yml
+++ b/.github/workflows/publish_pypi.yml
@@ -7,14 +7,16 @@ jobs:
     name: Build and publish Python distribution to PyPI
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-python@v4
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.9'
       - name: Build a binary wheel and a source tarball
         run: |
           python -mpip install wheel
           python setup.py sdist bdist_wheel
       - name: Publish distribution to PyPI
         if: startsWith(github.ref, 'refs/tags')
-        uses: pypa/gh-action-pypi-publish@v1.3.0
+        uses: pypa/gh-action-pypi-publish@v1.8.14
         with:
           password: ${{ secrets.PYPI_PASSWORD }}