diff --git a/.github/workflows/build_wheels.yml b/.github/workflows/build_wheels.yml
index ea0688950..c88f664b7 100644
--- a/.github/workflows/build_wheels.yml
+++ b/.github/workflows/build_wheels.yml
@@ -18,17 +18,17 @@ jobs:
     steps:
 
     - name: Check out
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         fetch-depth: 0  # unshallow fetch for setuptools-scm
 
     - name: Install Python 3.8
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: '3.8'
 
     - name: Build wheels (Python 3.7 through 3.9)
-      uses: pypa/cibuildwheel@v2.11.1
+      uses: pypa/cibuildwheel@v2.16.2
       with:
         output-dir: dist
       env:
@@ -41,7 +41,7 @@ jobs:
         CIBW_ENVIRONMENT: "CFLAGS='-g0'"
 
     - name: Build wheels (Python 3.10 only)
-      uses: pypa/cibuildwheel@v2.11.1
+      uses: pypa/cibuildwheel@v2.16.2
       with:
         output-dir: dist
       env:
@@ -61,7 +61,7 @@ jobs:
         python -m build --sdist
 
     - name: Upload build artifacts
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4
       with:
         name: wheelstorage
         path: ./dist/*
@@ -87,7 +87,7 @@ jobs:
       shell: bash
 
     - name: Download release assets
-      uses: actions/download-artifact@v3
+      uses: actions/download-artifact@v4
       with:
         name: wheelstorage
         path: dist
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 4f8bba188..eb6d5178e 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -23,12 +23,12 @@ jobs:
     steps:
 
     - name: Check out
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         submodules: true
 
     - name: Set up Python 3.8
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: '3.8'
 
diff --git a/.github/workflows/run_tests.yml b/.github/workflows/run_tests.yml
index 25b324dbb..64a454d9e 100644
--- a/.github/workflows/run_tests.yml
+++ b/.github/workflows/run_tests.yml
@@ -43,12 +43,12 @@ jobs:
     steps:
 
     - name: Check out
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         submodules: true
 
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: ${{ matrix.python-version }}
 
diff --git a/dev-requirements.txt b/dev-requirements.txt
index 55cb51ff5..9d1e7e889 100644
--- a/dev-requirements.txt
+++ b/dev-requirements.txt
@@ -1,2 +1,2 @@
-pytest-cov==4.0.0
-pytest-xdist==2.5.0
+pytest-cov==4.1.0
+pytest-xdist==3.5.0
diff --git a/requirements.txt b/requirements.txt
index a02da434e..b02eea34e 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,4 +1,4 @@
 # 'lxml' is not a primary requirement of psautohint but it's listed here because we
 # want to have control over the version and guarantee that the XML output remains stable
-lxml==4.9.1
-fonttools[lxml,ufo]==4.37.4
+lxml==5.1.0
+fonttools[lxml,ufo]==4.47.0
diff --git a/setup.py b/setup.py
index 2ed6b27f2..5bfce5244 100644
--- a/setup.py
+++ b/setup.py
@@ -589,7 +589,7 @@ def run(self):
       extras_require={
           "testing": [
               "pytest-cov >=4, <5",
-              "pytest-xdist >=2.5.0, <2.6.0",
+              "pytest-xdist >=3.5.0, <3.6.0",
           ],
       },
       cmdclass=cmdclass,