diff --git a/.github/workflows/pathogen-repo-ci.yaml b/.github/workflows/pathogen-repo-ci.yaml
index 1e5166a..cca6860 100644
--- a/.github/workflows/pathogen-repo-ci.yaml
+++ b/.github/workflows/pathogen-repo-ci.yaml
@@ -221,7 +221,7 @@ jobs:
       # future changes to setup-nextstrain-cli.
       #
       #   -trs, 28 April 2022
-      - uses: nextstrain/.github/actions/setup-nextstrain-cli@0e74eb59bbdecc80de08d04b26b7b0242890b582
+      - uses: nextstrain/.github/actions/setup-nextstrain-cli@585ce0dde7fda2a82f7ef9054fbb95d2eb21a610
         with:
           runtime: ${{ matrix.runtime }}
           # Consider parameterizing the Python version. -trs, 1 April 2022
diff --git a/actions/setup-nextstrain-cli/action.yaml b/actions/setup-nextstrain-cli/action.yaml
index 76736c6..1e97ee0 100644
--- a/actions/setup-nextstrain-cli/action.yaml
+++ b/actions/setup-nextstrain-cli/action.yaml
@@ -45,7 +45,7 @@ inputs:
 runs:
   using: composite
   steps:
-    - uses: actions/setup-python@v3
+    - uses: actions/setup-python@v5
       with:
         python-version: "${{ inputs.python-version }}"
 
diff --git a/actions/workflow-context/action.yaml b/actions/workflow-context/action.yaml
index d9351ee..1d6ef53 100644
--- a/actions/workflow-context/action.yaml
+++ b/actions/workflow-context/action.yaml
@@ -38,7 +38,7 @@ runs:
   using: composite
   steps:
     - id: context
-      uses: actions/github-script@v6
+      uses: actions/github-script@v7
       with:
         script: |
           let idToken = await core.getIDToken();