diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8d5f92d..650d3c6 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -44,13 +44,13 @@ jobs:
           disk-root: 'C:'
 
       - name: Checkout current branch (full)
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
       - name: Setup Java (temurin@8)
         if: matrix.java == 'temurin@8'
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: 8
@@ -104,13 +104,13 @@ jobs:
           disk-root: 'C:'
 
       - name: Checkout current branch (full)
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
       - name: Setup Java (temurin@8)
         if: matrix.java == 'temurin@8'
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: 8
@@ -120,7 +120,7 @@ jobs:
         uses: sbt/setup-sbt@v1
 
       - name: Download target directories (2.12.20)
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           name: target-${{ matrix.os }}-2.12.20-${{ matrix.java }}
 
diff --git a/.github/workflows/clean.yml b/.github/workflows/clean.yml
index bfc865d..4bb28c8 100644
--- a/.github/workflows/clean.yml
+++ b/.github/workflows/clean.yml
@@ -9,6 +9,9 @@ name: Clean
 
 on: push
 
+permissions:
+  actions: write
+
 jobs:
   delete-artifacts:
     name: Delete Artifacts
diff --git a/project/plugins.sbt b/project/plugins.sbt
index c34a869..f97a797 100644
--- a/project/plugins.sbt
+++ b/project/plugins.sbt
@@ -5,7 +5,7 @@ addSbtPlugin(("com.github.sbt"        % "sbt-site-paradox"   % "1.7.0").exclude(
 addSbtPlugin("com.github.sbt"         % "sbt-ghpages"        % "0.9.0")
 addSbtPlugin("com.github.sbt"         % "sbt-ci-release"     % "1.11.2")
 addSbtPlugin("org.scalameta"          % "sbt-scalafmt"       % "2.5.5")
-addSbtPlugin("com.github.sbt"         % "sbt-github-actions" % "0.25.0")
+addSbtPlugin("com.github.sbt"         % "sbt-github-actions" % "0.28.0")
 
 libraryDependencies += "org.scala-sbt" %% "scripted-plugin" % sbtVersion.value