diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index c307851..d5522e0 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -174,7 +174,7 @@ jobs:
         with:
           java-version: '21'
           distribution: temurin
-      - uses: gradle/actions/setup-gradle@v4
+      - uses: gradle/actions/setup-gradle@v6
         with:
           gradle-version: "8.14.3"
       - name: Sign a throwaway artifact via useInMemoryPgpKeys (BouncyCastle)
diff --git a/pom.xml b/pom.xml
index 77077b5..964d4d9 100644
--- a/pom.xml
+++ b/pom.xml
@@ -351,7 +351,7 @@ SPDX-License-Identifier: Apache-2.0
                 <plugin>
                     <groupId>org.pitest</groupId>
                     <artifactId>pitest-maven</artifactId>
-                    <version>1.25.6</version>
+                    <version>1.25.7</version>
                 </plugin>
                 <plugin>
                     <groupId>org.sonatype.central</groupId>