diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index cd032b6..8db82a9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -28,7 +28,7 @@ jobs:
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: rustfmt, clippy
-      - uses: Swatinem/rust-cache@v2.9.2
+      - uses: Swatinem/rust-cache@v2.9.3
       - run: cargo fmt --all --check
       - run: cargo clippy --workspace --all-targets --all-features
 
@@ -42,8 +42,8 @@ jobs:
     steps:
       - uses: actions/checkout@v7.0.1
       - uses: dtolnay/rust-toolchain@stable
-      - uses: Swatinem/rust-cache@v2.9.2
-      - uses: taiki-e/install-action@v2.87.0
+      - uses: Swatinem/rust-cache@v2.9.3
+      - uses: taiki-e/install-action@v2.87.29
         with:
           tool: cargo-nextest
       # --no-tests=warn because the crates are still skeletons and nextest
@@ -62,7 +62,7 @@ jobs:
       - uses: actions/checkout@v7.0.1
       # Must match rust-version in Cargo.toml and rust-toolchain.toml.
       - uses: dtolnay/rust-toolchain@1.98.0
-      - uses: Swatinem/rust-cache@v2.9.2
+      - uses: Swatinem/rust-cache@v2.9.3
       - run: cargo check --workspace --all-features
 
   docs:
@@ -73,7 +73,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7.0.1
       - uses: dtolnay/rust-toolchain@stable
-      - uses: Swatinem/rust-cache@v2.9.2
+      - uses: Swatinem/rust-cache@v2.9.3
       - run: cargo doc --workspace --no-deps --all-features
 
   # Packaging is checked on every change rather than at release time, because a
@@ -85,7 +85,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7.0.1
       - uses: dtolnay/rust-toolchain@stable
-      - uses: Swatinem/rust-cache@v2.9.2
+      - uses: Swatinem/rust-cache@v2.9.3
       - run: cargo publish --workspace --locked --dry-run
 
   deny:
@@ -93,7 +93,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v7.0.1
-      - uses: taiki-e/install-action@v2.87.0
+      - uses: taiki-e/install-action@v2.87.29
         with:
           tool: cargo-deny
       - run: cargo deny check
@@ -106,7 +106,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7.0.1
       - uses: dtolnay/rust-toolchain@stable
-      - uses: taiki-e/install-action@v2.87.0
+      - uses: taiki-e/install-action@v2.87.29
         with:
           tool: cargo-geiger
       - run: cargo geiger --workspace --output-format GitHubMarkdown >> "$GITHUB_STEP_SUMMARY" || true
diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index aba4598..8d92c04 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -24,7 +24,7 @@ jobs:
       - uses: dtolnay/rust-toolchain@nightly
         with:
           components: miri
-      - uses: Swatinem/rust-cache@v2.9.2
+      - uses: Swatinem/rust-cache@v2.9.3
       - name: Miri over the crates with unsafe in them
         env:
           MIRIFLAGS: -Zmiri-strict-provenance -Zmiri-symbolic-alignment-check
@@ -44,7 +44,7 @@ jobs:
       - uses: dtolnay/rust-toolchain@nightly
         with:
           components: rust-src
-      - uses: Swatinem/rust-cache@v2.9.2
+      - uses: Swatinem/rust-cache@v2.9.3
       - name: Test under ${{ matrix.sanitizer }}Sanitizer
         env:
           RUSTFLAGS: -Zsanitizer=${{ matrix.sanitizer }}
@@ -60,7 +60,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7.0.1
       - uses: dtolnay/rust-toolchain@stable
-      - uses: Swatinem/rust-cache@v2.9.2
+      - uses: Swatinem/rust-cache@v2.9.3
       - env:
           RUSTFLAGS: --cfg loom
         run: cargo test -p kohebi-core --features loom --release -- --test-threads=1
@@ -75,7 +75,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7.0.1
       - uses: dtolnay/rust-toolchain@stable
-      - uses: Swatinem/rust-cache@v2.9.2
+      - uses: Swatinem/rust-cache@v2.9.3
       - run: cargo build --release --bin kohebi
       - name: Full corpus under --${{ matrix.mode }}
         run: |
@@ -87,7 +87,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v7.0.1
-      - uses: taiki-e/install-action@v2.87.0
+      - uses: taiki-e/install-action@v2.87.29
         with:
           tool: cargo-deny
       - run: cargo deny check advisories
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b8fc7d9..40fc255 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -50,7 +50,7 @@ jobs:
       # when it does fail it fails here rather than as `can't find crate for
       # core` several minutes into a build.
       - run: rustup target add ${{ matrix.target }}
-      - uses: Swatinem/rust-cache@v2.9.2
+      - uses: Swatinem/rust-cache@v2.9.3
       - run: cargo build --release --bin kohebi --target ${{ matrix.target }}
       - name: Package
         shell: bash
@@ -70,7 +70,7 @@ jobs:
           else
             tar czf "$name.tar.gz" "$name"
           fi
-      - uses: actions/upload-artifact@v7.0.1
+      - uses: actions/upload-artifact@v7.0.2
         with:
           name: dist-${{ matrix.target }}
           # One pattern per line. The upload action's globs are not a shell's,
@@ -94,7 +94,7 @@ jobs:
       - uses: actions/checkout@v7.0.1
         with:
           ref: ${{ env.TAG }}
-      - uses: actions/download-artifact@v8.0.1
+      - uses: actions/download-artifact@v8.0.2
         with:
           pattern: dist-*
           merge-multiple: true
@@ -107,7 +107,7 @@ jobs:
       - uses: actions/attest-build-provenance@v4.2.2
         with:
           subject-path: dist/*
-      - uses: softprops/action-gh-release@v3.0.2
+      - uses: softprops/action-gh-release@v3.0.3
         with:
           tag_name: ${{ env.TAG }}
           files: dist/*
@@ -141,7 +141,7 @@ jobs:
         with:
           ref: ${{ env.TAG }}
       - uses: dtolnay/rust-toolchain@stable
-      - uses: Swatinem/rust-cache@v2.9.2
+      - uses: Swatinem/rust-cache@v2.9.3
       - name: The tag and the manifests agree
         run: |
           set -euo pipefail