diff --git a/.github/workflows/build-exe-for-python-sdk.yml b/.github/workflows/build-exe-for-python-sdk.yml
index b119a548b8..a112267f4d 100644
--- a/.github/workflows/build-exe-for-python-sdk.yml
+++ b/.github/workflows/build-exe-for-python-sdk.yml
@@ -93,7 +93,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v6.3.0
         with:
           python-version: '3.10'
 
@@ -133,7 +133,7 @@ jobs:
           node-version: 24
           cache: pnpm
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v6.3.0
         with:
           python-version: '3.10'
 
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index aecff76a7d..6c3697f3b8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -323,7 +323,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v6.3.0
         with:
           python-version: '3.10'
           cache: pip
diff --git a/.github/workflows/docs-pages.yml b/.github/workflows/docs-pages.yml
index 281e931c50..34a29c1293 100644
--- a/.github/workflows/docs-pages.yml
+++ b/.github/workflows/docs-pages.yml
@@ -53,7 +53,7 @@ jobs:
         run: pnpm run doc-sync
 
       - name: Upload Pages artifact
-        uses: actions/upload-pages-artifact@v4
+        uses: actions/upload-pages-artifact@v5
         with:
           path: website/.dist
 
diff --git a/python/sdk-runtime/pyproject.toml b/python/sdk-runtime/pyproject.toml
index e04b9e6728..6db7595297 100644
--- a/python/sdk-runtime/pyproject.toml
+++ b/python/sdk-runtime/pyproject.toml
@@ -1,5 +1,5 @@
 [build-system]
-requires = ["hatchling>=1.24.0"]
+requires = ["hatchling>=1.30.1"]
 build-backend = "hatchling.build"
 
 [project]
diff --git a/python/sdk/pyproject.toml b/python/sdk/pyproject.toml
index b0f1acf5f2..eeef355e90 100644
--- a/python/sdk/pyproject.toml
+++ b/python/sdk/pyproject.toml
@@ -1,5 +1,5 @@
 [build-system]
-requires = ["hatchling>=1.24.0"]
+requires = ["hatchling>=1.30.1"]
 build-backend = "hatchling.build"
 
 [project]