diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 241d646e..b2d9ea92 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -109,7 +109,7 @@ jobs:
           fetch-depth: 0
           lfs: true
           persist-credentials: false
-      - uses: conda-incubator/setup-miniconda@v3  # zizmor: ignore[unpinned-uses]
+      - uses: conda-incubator/setup-miniconda@v4  # zizmor: ignore[unpinned-uses]
         with:
           installer-url: https://github.com/conda-forge/miniforge/releases/download/25.3.1-0/Miniforge3-25.3.1-0-Linux-x86_64.sh
           python-version: "3.13"
@@ -120,7 +120,7 @@ jobs:
         run: |
           conda list
           tox -e py313
-      - uses: codecov/codecov-action@v5  # zizmor: ignore[unpinned-uses]
+      - uses: codecov/codecov-action@v6  # zizmor: ignore[unpinned-uses]
         with:
           token: ${{ secrets.CODECOV_TOKEN }}  # zizmor: ignore[secrets-outside-env]
           files: ./coverage.xml