diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 4b9e1b7..6b12072 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -70,7 +70,7 @@ jobs:
         shell: bash
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-dotnet@v5
+      - uses: actions/setup-dotnet@v6
         with:
           cache: true
           cache-dependency-path: ${{ env.PROJECT_NAME }}/packages.lock.json
@@ -107,7 +107,7 @@ jobs:
       - name: Generate changelog
         # v4 has bug: heredoc EOF is not handled properly, fixed in 11ab60a
         # but not released yet, so pin to full commit sha.
-        uses: orhun/git-cliff-action@4d0efd7c7a4b55484abf71c29a29712192adebdb
+        uses: orhun/git-cliff-action@7be73fff706212546dbbf74b6a5939ef08f5c14d
         id: changelog
         with:
           config: .github/cliff.toml
@@ -146,7 +146,7 @@ jobs:
           fi
       - name: Generate attestation
         id: attest
-        uses: actions/attest@v4
+        uses: actions/attest@v4.2.0
         with:
           subject-path: release/*.zip
       - name: Get date