diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 87cc00d..3397d2e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,23 +13,12 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
   cancel-in-progress: true
 
-# Fail every cargo invocation on warnings from workspace-local packages
-# (cargo's build.warnings, stable since 1.97). CI-only: local builds
-# still just warn.
-env:
-  CARGO_BUILD_WARNINGS: deny
-
 jobs:
   test:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions-rust-lang/setup-rust-toolchain@v1
-        with:
-          # Warnings are handled by CARGO_BUILD_WARNINGS above, which applies
-          # to local packages only. The action defaults to `-D warnings`,
-          # which also denies warnings from dependencies.
-          rustflags: ""
+      - uses: actions-rust-lang/setup-rust-toolchain@v2
       # Simpler to install Lean than to use lean-action for only this purpose.
       - name: Install Lean
         run: |
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index 7829365..cd11d72 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -14,7 +14,7 @@ jobs:
   update:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       # Mint a token from the GitHub App so the opened PR triggers CI; pushes
       # made with GITHUB_TOKEN do not. Same App as the org repo-sync workflows.