diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 1a308c1..602a958 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -52,7 +52,7 @@ jobs:
       with:
         python-version: "3.12"
 
-    - uses: astral-sh/setup-uv@v7.6.0
+    - uses: astral-sh/setup-uv@v8.0.0
 
     - run: uv build
 
@@ -79,7 +79,7 @@ jobs:
         name: dist
         path: dist
 
-    - uses: pypa/gh-action-pypi-publish@v1.13.0
+    - uses: pypa/gh-action-pypi-publish@v1.14.0
 
   release:
     name: GitHub Release
@@ -108,7 +108,7 @@ jobs:
         echo "$body" >> $GITHUB_OUTPUT
         echo "EOF" >> $GITHUB_OUTPUT
 
-    - uses: softprops/action-gh-release@v2.6.1
+    - uses: softprops/action-gh-release@v3.0.0
       with:
         tag_name: v${{ needs.version-check.outputs.version }}
         name: v${{ needs.version-check.outputs.version }}
diff --git a/pyproject.toml b/pyproject.toml
index 98875f2..a70d674 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -65,7 +65,8 @@ target-version = "py312"
 # E — pycodestyle errors, F — pyflakes, W — warnings, I — isort, UP — pyupgrade
 select = ["E", "F", "W", "I", "UP"]
 # E501 — line too long (covered by line-length above)
-ignore = ["E501"]
+# UP017 — use datetime.UTC (only available in Python 3.11+, we support 3.10)
+ignore = ["E501", "UP017"]
 
 [tool.ruff.lint.per-file-ignores]
 "tests/*"    = ["E402"]