diff --git a/.github/workflows/android-webview.yml b/.github/workflows/android-webview.yml
index f5367bf4ce..0cda6e1cdb 100644
--- a/.github/workflows/android-webview.yml
+++ b/.github/workflows/android-webview.yml
@@ -37,18 +37,18 @@ jobs:
       run:
         working-directory: demos/android-webview
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       # 17, not the app's own jvmTarget: that is the bytecode level the app
       # compiles *to*, while the Android Gradle Plugin itself needs a JDK 17.
       - name: Set up JDK 17
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: "17"
 
       - name: Set up Android SDK
-        uses: android-actions/setup-android@v3
+        uses: android-actions/setup-android@v4
 
       - name: Gradle build + unit tests
         run: ./gradlew --no-daemon --stacktrace testReleaseUnitTest assembleRelease
diff --git a/.github/workflows/ios-webview.yml b/.github/workflows/ios-webview.yml
index 2e3acf3c98..b49f3a9428 100644
--- a/.github/workflows/ios-webview.yml
+++ b/.github/workflows/ios-webview.yml
@@ -37,7 +37,7 @@ jobs:
       run:
         working-directory: demos/ios-webview
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Toolchain versions
         run: xcodebuild -version
diff --git a/package-lock.json b/package-lock.json
index d2127d20d9..81df131f6e 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
 	"name": "@prosopo/captcha",
-	"version": "3.7.15",
+	"version": "3.7.16",
 	"lockfileVersion": 3,
 	"requires": true,
 	"packages": {
 		"": {
 			"name": "@prosopo/captcha",
-			"version": "3.7.15",
+			"version": "3.7.16",
 			"license": "Apache-2.0",
 			"workspaces": [
 				"dev/*",