diff --git a/.github/workflows/msvc.yml b/.github/workflows/msvc.yml
index 58715d5ab..e58b083c0 100644
--- a/.github/workflows/msvc.yml
+++ b/.github/workflows/msvc.yml
@@ -44,13 +44,13 @@ jobs:
 
     # Upload SARIF file to GitHub Code Scanning Alerts
     - name: Upload SARIF to GitHub
-      uses: github/codeql-action/upload-sarif@v2
+      uses: github/codeql-action/upload-sarif@v3
       with:
         sarif_file: ${{ steps.run-analysis.outputs.sarif }}
 
     # Upload SARIF file as an Artifact to download and view
     - name: Upload SARIF as an Artifact
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4
       with:
         name: sarif-file
         path: ${{ steps.run-analysis.outputs.sarif }}
diff --git a/CustomRules.ruleset b/CustomRules.ruleset
index 59f281ab0..a7571b026 100644
--- a/CustomRules.ruleset
+++ b/CustomRules.ruleset
@@ -9,5 +9,7 @@
     <Rule Id="C26439" Action="None" /> <!-- Exclude: This kind of function should not throw. Declare it 'noexcept' (f.6). -->
     <Rule Id="C26813" Action="None" /> <!-- Exclude: Use 'bitwise and' to check if a flag is set. -->
     <Rule Id="C6255" Action="None" /> <!-- _alloca indicates failure by raising a stack overflow exception. Consider using _malloca instead. -->
+    <Rule Id="C26819" Action="None" /> <!-- Exclude: Unannotated fallthrough between switch labels (es.78). Advisory; our fallthroughs are intentional and we don't annotate with [[fallthrough]]. -->
+    <Rule Id="C28251" Action="None" /> <!-- Exclude: Inconsistent SAL annotation for operator new/new[]. Our global allocators (free_list) intentionally carry no SAL annotations. -->
   </Rules>
 </RuleSet>