diff --git a/.github/workflows/build_and_test.yaml b/.github/workflows/build_and_test.yaml
index 869f6982e9..b4b85dfd8a 100644
--- a/.github/workflows/build_and_test.yaml
+++ b/.github/workflows/build_and_test.yaml
@@ -122,7 +122,7 @@ jobs:
         submodules: true
 
     - name: Create Python Environment
-      uses: mamba-org/setup-micromamba@06375d89d211a1232ef63355742e9e2e564bc7f7 # v2.0.2
+      uses: mamba-org/setup-micromamba@068f1ab4b37ed9b3d9f73da7db90a0cda0a48d29 # v2.0.3
       with:
         micromamba-version: '2.0.2-2'
         environment-name: test
@@ -184,13 +184,13 @@ jobs:
       run: tar --use-compress-program='zstd -10 -T0' -cvf install.tar install
 
     - name: 'Upload build'
-      uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+      uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
       with:
         name: build-${{ inputs.config }}-${{ github.sha }}
         path: build.tar
         retention-days: 7
     - name: 'Upload install'
-      uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+      uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
       with:
         name: install-${{ inputs.config }}-${{ github.sha }}
         path: install.tar
@@ -219,7 +219,7 @@ jobs:
         path: code
 
     - name: Create Python Environment
-      uses: mamba-org/setup-micromamba@06375d89d211a1232ef63355742e9e2e564bc7f7 # v2.0.2
+      uses: mamba-org/setup-micromamba@068f1ab4b37ed9b3d9f73da7db90a0cda0a48d29 # v2.0.3
       with:
         micromamba-version: '2.0.2-2'
         environment-name: test
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index e1ad37c190..95b723c431 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -67,7 +67,7 @@ jobs:
       run: tar -cvJf ${name}-${tag:1}.tar.xz ${name}-${tag:1}
 
     - name: Upload release files
-      uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+      uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
       with:
         name: release
         path: |
@@ -86,7 +86,7 @@ jobs:
         name: release
 
     - name: Create release
-      uses: softprops/action-gh-release@01570a1f39cb168c169c802c3bceb9e93fb10974 # v2.1.0
+      uses: softprops/action-gh-release@7b4da11513bf3f43f9999e90eabced41ab8bb048 # v2.2.0
       if: startsWith(github.ref, 'refs/tags/v')
       with:
         files: "*.tar.*"
diff --git a/.github/workflows/stale.yaml b/.github/workflows/stale.yaml
index 0db1f10010..b03de87690 100644
--- a/.github/workflows/stale.yaml
+++ b/.github/workflows/stale.yaml
@@ -8,4 +8,4 @@ on:
 
 jobs:
   stale:
-    uses: glotzerlab/workflows/.github/workflows/stale.yaml@1747bc5c994ec280440dd051f2928791407692c8 # 0.5.1
+    uses: glotzerlab/workflows/.github/workflows/stale.yaml@a36a97114c60241b26217ce92abbb64621ac67c7 # 0.6.0
diff --git a/.github/workflows/update-conda-lockfiles.yaml b/.github/workflows/update-conda-lockfiles.yaml
index 8131dc4bcd..acc3173089 100644
--- a/.github/workflows/update-conda-lockfiles.yaml
+++ b/.github/workflows/update-conda-lockfiles.yaml
@@ -8,7 +8,7 @@ on:
 
 jobs:
   update:
-    uses: glotzerlab/workflows/.github/workflows/update-conda-lockfiles.yaml@1747bc5c994ec280440dd051f2928791407692c8 # 0.5.1
+    uses: glotzerlab/workflows/.github/workflows/update-conda-lockfiles.yaml@a36a97114c60241b26217ce92abbb64621ac67c7 # 0.6.0
     secrets: inherit
     with:
       branch: trunk-patch