diff --git a/.github/workflows/build_wheels.yml b/.github/workflows/build_wheels.yml
index ea0688950..32b251e7b 100644
--- a/.github/workflows/build_wheels.yml
+++ b/.github/workflows/build_wheels.yml
@@ -18,17 +18,17 @@ jobs:
     steps:
 
     - name: Check out
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         fetch-depth: 0  # unshallow fetch for setuptools-scm
 
     - name: Install Python 3.8
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: '3.8'
 
     - name: Build wheels (Python 3.7 through 3.9)
-      uses: pypa/cibuildwheel@v2.11.1
+      uses: pypa/cibuildwheel@v2.19.0
       with:
         output-dir: dist
       env:
@@ -41,7 +41,7 @@ jobs:
         CIBW_ENVIRONMENT: "CFLAGS='-g0'"
 
     - name: Build wheels (Python 3.10 only)
-      uses: pypa/cibuildwheel@v2.11.1
+      uses: pypa/cibuildwheel@v2.19.0
       with:
         output-dir: dist
       env:
@@ -61,7 +61,7 @@ jobs:
         python -m build --sdist
 
     - name: Upload build artifacts
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4
       with:
         name: wheelstorage
         path: ./dist/*
@@ -87,7 +87,7 @@ jobs:
       shell: bash
 
     - name: Download release assets
-      uses: actions/download-artifact@v3
+      uses: actions/download-artifact@v4
       with:
         name: wheelstorage
         path: dist
@@ -99,7 +99,7 @@ jobs:
         password: ${{ secrets.pypi_password }}
 
     - name: Create GitHub Release
-      uses: softprops/action-gh-release@v1
+      uses: softprops/action-gh-release@v2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 4f8bba188..eb6d5178e 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -23,12 +23,12 @@ jobs:
     steps:
 
     - name: Check out
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         submodules: true
 
     - name: Set up Python 3.8
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: '3.8'
 
diff --git a/.github/workflows/run_tests.yml b/.github/workflows/run_tests.yml
index 25b324dbb..64a454d9e 100644
--- a/.github/workflows/run_tests.yml
+++ b/.github/workflows/run_tests.yml
@@ -43,12 +43,12 @@ jobs:
     steps:
 
     - name: Check out
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         submodules: true
 
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: ${{ matrix.python-version }}
 
diff --git a/dev-requirements.txt b/dev-requirements.txt
index 55cb51ff5..fb90240b5 100644
--- a/dev-requirements.txt
+++ b/dev-requirements.txt
@@ -1,2 +1,2 @@
-pytest-cov==4.0.0
-pytest-xdist==2.5.0
+pytest-cov==5.0.0
+pytest-xdist==3.6.1
diff --git a/requirements.txt b/requirements.txt
index a02da434e..bb1e9f860 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,4 +1,4 @@
 # 'lxml' is not a primary requirement of psautohint but it's listed here because we
 # want to have control over the version and guarantee that the XML output remains stable
-lxml==4.9.1
+lxml==5.2.2
 fonttools[lxml,ufo]==4.37.4
diff --git a/setup.py b/setup.py
index 2ed6b27f2..c0814d469 100644
--- a/setup.py
+++ b/setup.py
@@ -588,8 +588,8 @@ def run(self):
       ],
       extras_require={
           "testing": [
-              "pytest-cov >=4, <5",
-              "pytest-xdist >=2.5.0, <2.6.0",
+              "pytest-cov >=5, <6",
+              "pytest-xdist >=3.6.1, <3.7.0",
           ],
       },
       cmdclass=cmdclass,