diff --git a/.github/workflows/build_inc.yml b/.github/workflows/build_inc.yml
index e28b306..f4cccda 100644
--- a/.github/workflows/build_inc.yml
+++ b/.github/workflows/build_inc.yml
@@ -52,7 +52,7 @@ jobs:
         tox@4.36.1 run -v
         -e build-${{ matrix.flavor }}
 
-    - uses: actions/upload-artifact@v6
+    - uses: actions/upload-artifact@v7
       with:
         name: dist-${{ matrix.flavor }}
         path: dist/*
diff --git a/.github/workflows/inc_tc_basedpyright.yml b/.github/workflows/inc_tc_basedpyright.yml
index 746cabd..449e89a 100644
--- a/.github/workflows/inc_tc_basedpyright.yml
+++ b/.github/workflows/inc_tc_basedpyright.yml
@@ -32,7 +32,7 @@ jobs:
         repository: abelcheung/ci-annotation-converter
         path: ci-annotation-converter
 
-    - uses: actions/download-artifact@v7
+    - uses: actions/download-artifact@v8
       if: inputs.tarball-flavor != 'none'
       with:
         name: dist-${{ inputs.tarball-flavor }}
diff --git a/.github/workflows/inc_tc_mypy.yml b/.github/workflows/inc_tc_mypy.yml
index 88377fe..16ca242 100644
--- a/.github/workflows/inc_tc_mypy.yml
+++ b/.github/workflows/inc_tc_mypy.yml
@@ -32,7 +32,7 @@ jobs:
         repository: abelcheung/ci-annotation-converter
         path: ci-annotation-converter
 
-    - uses: actions/download-artifact@v7
+    - uses: actions/download-artifact@v8
       if: inputs.tarball-flavor != 'none'
       with:
         name: dist-${{ inputs.tarball-flavor }}
diff --git a/.github/workflows/inc_tc_pyrefly.yml b/.github/workflows/inc_tc_pyrefly.yml
index ca93486..216cdf1 100644
--- a/.github/workflows/inc_tc_pyrefly.yml
+++ b/.github/workflows/inc_tc_pyrefly.yml
@@ -32,7 +32,7 @@ jobs:
         repository: abelcheung/ci-annotation-converter
         path: ci-annotation-converter
 
-    - uses: actions/download-artifact@v7
+    - uses: actions/download-artifact@v8
       if: inputs.tarball-flavor != 'none'
       with:
         name: dist-${{ inputs.tarball-flavor }}
diff --git a/.github/workflows/inc_tc_pyright.yml b/.github/workflows/inc_tc_pyright.yml
index c1e82f5..0434cd1 100644
--- a/.github/workflows/inc_tc_pyright.yml
+++ b/.github/workflows/inc_tc_pyright.yml
@@ -32,7 +32,7 @@ jobs:
         repository: abelcheung/ci-annotation-converter
         path: ci-annotation-converter
 
-    - uses: actions/download-artifact@v7
+    - uses: actions/download-artifact@v8
       if: inputs.tarball-flavor != 'none'
       with:
         name: dist-${{ inputs.tarball-flavor }}
diff --git a/.github/workflows/inc_tc_ty.yml b/.github/workflows/inc_tc_ty.yml
index 76d8e94..ea33032 100644
--- a/.github/workflows/inc_tc_ty.yml
+++ b/.github/workflows/inc_tc_ty.yml
@@ -26,7 +26,7 @@ jobs:
   ty:
     runs-on: ubuntu-slim
     steps:
-    - uses: actions/download-artifact@v7
+    - uses: actions/download-artifact@v8
       if: inputs.tarball-flavor != 'none'
       with:
         name: dist-${{ inputs.tarball-flavor }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1597734..58bd788 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -42,7 +42,7 @@ jobs:
           - "alt"
     steps:
 
-    - uses: actions/download-artifact@v7
+    - uses: actions/download-artifact@v8
       with:
         name: dist-${{ matrix.flavor }}
         path: dist
@@ -67,13 +67,13 @@ jobs:
       id-token: write
       attestations: write
     steps:
-    - uses: actions/download-artifact@v7
+    - uses: actions/download-artifact@v8
       with:
         pattern: dist-*
         path: dist
         merge-multiple: true
 
-    - uses: actions/attest-build-provenance@v3
+    - uses: actions/attest-build-provenance@v4
       with:
         subject-path: |
           dist/*.whl
diff --git a/.github/workflows/test_inc.yml b/.github/workflows/test_inc.yml
index 7a9902a..76f5175 100644
--- a/.github/workflows/test_inc.yml
+++ b/.github/workflows/test_inc.yml
@@ -25,7 +25,7 @@ jobs:
           - "lxml60"
     runs-on: ubuntu-slim
     steps:
-    - uses: actions/download-artifact@v7
+    - uses: actions/download-artifact@v8
       with:
         name: dist-${{ inputs.flavor }}
         path: dist
@@ -63,7 +63,7 @@ jobs:
         --installpkg ${{ steps.wheel-name.outputs.filename }}
         --result-json test-${{ inputs.flavor }}-mypy-stubtest-${{ matrix.lxml-ver }}.json
 
-    - uses: actions/upload-artifact@v6
+    - uses: actions/upload-artifact@v7
       with:
         name: log-${{ inputs.flavor }}-mypy-stubtest-${{ matrix.lxml-ver }}
         path: test-${{ inputs.flavor }}-mypy-*.json
@@ -85,7 +85,7 @@ jobs:
           - "ubuntu-slim"
     runs-on: ${{ matrix.os }}
     steps:
-    - uses: actions/download-artifact@v7
+    - uses: actions/download-artifact@v8
       with:
         name: dist-${{ inputs.flavor }}
         path: dist
@@ -120,7 +120,7 @@ jobs:
         --installpkg ${{ steps.wheel-name.outputs.filename }}
         --result-json test-${{ inputs.flavor }}-stub-${{ matrix.pyver }}.json
 
-    - uses: actions/upload-artifact@v6
+    - uses: actions/upload-artifact@v7
       with:
         name: log-${{ inputs.flavor }}-stub-${{ matrix.pyver }}
         path: test-${{ inputs.flavor }}-stub-*.json
@@ -143,7 +143,7 @@ jobs:
           - macos-14
     runs-on: ${{ matrix.os }}
     steps:
-    - uses: actions/download-artifact@v7
+    - uses: actions/download-artifact@v8
       with:
         name: dist-${{ inputs.flavor }}
         path: dist
@@ -183,7 +183,7 @@ jobs:
         --installpkg ${{ steps.wheel-name.outputs.filename }}
         --result-json test-${{ inputs.flavor }}-rt-${{ matrix.os }}-${{ matrix.pyver }}.json
 
-    - uses: actions/upload-artifact@v6
+    - uses: actions/upload-artifact@v7
       with:
         name: log-${{ inputs.flavor }}-rt-${{ matrix.os }}-${{ matrix.pyver }}
         path: test-${{ inputs.flavor }}-rt-*.json
@@ -197,13 +197,13 @@ jobs:
       actions: write
     steps:
 
-    - uses: actions/download-artifact@v7
+    - uses: actions/download-artifact@v8
       with:
         path: all-logs
         pattern: log-${{ inputs.flavor }}-*
         merge-multiple: true
 
-    - uses: actions/upload-artifact@v6
+    - uses: actions/upload-artifact@v7
       with:
         name: alllogs-${{ inputs.flavor }}
         path: all-logs