diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index dad89c2540b..2e2b84d788a 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -124,7 +124,7 @@ jobs:
       run: |
         make generate-llhttp
     - name: Upload llhttp generated files
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v5
       with:
         name: llhttp
         path: vendor/llhttp/build
@@ -358,7 +358,7 @@ jobs:
       run: |
         python -m build --sdist
     - name: Upload artifacts
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v5
       with:
         name: dist-sdist
         path: dist
@@ -453,7 +453,7 @@ jobs:
         CIBW_SKIP: pp* ${{ matrix.musl == 'musllinux' && '*manylinux*' || '*musllinux*' }}
         CIBW_ARCHS_MACOS: x86_64 arm64 universal2
     - name: Upload wheels
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v5
       with:
         name: >-
           dist-${{ matrix.os }}-${{ matrix.musl }}-${{
diff --git a/requirements/constraints.txt b/requirements/constraints.txt
index 082dc87bba7..77483742779 100644
--- a/requirements/constraints.txt
+++ b/requirements/constraints.txt
@@ -286,7 +286,7 @@ zlib-ng==1.0.0
     #   -r requirements/test-common.in
 
 # The following packages are considered to be unsafe in a requirements file:
-pip==25.2
+pip==25.3
     # via pip-tools
 setuptools==80.9.0
     # via pip-tools
diff --git a/requirements/dev.txt b/requirements/dev.txt
index bc26cacbea1..b769c365454 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -276,7 +276,7 @@ zlib-ng==1.0.0
     #   -r requirements/test-common.in
 
 # The following packages are considered to be unsafe in a requirements file:
-pip==25.2
+pip==25.3
     # via pip-tools
 setuptools==80.9.0
     # via pip-tools