diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index cb2b587b..6cf352a1 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -76,7 +76,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
+        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
         with:
           name: SARIF file
           path: results.sarif
diff --git a/pyproject.toml b/pyproject.toml
index aa1eb7ad..49c25edc 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -5,7 +5,7 @@
 [build-system]
 build-backend = "ozi_build.buildapi"
 requires      = [
-    "OZI.build[core,uv]~=1.4",
+    "OZI.build[core,uv]~=1.5",
 ]
 
 [tool.ozi-build.entry-points]
@@ -55,7 +55,7 @@ tag_regex = "^(?P<prefix>v)?(?P<version>[^\\+]+)(?P<suffix>.*)?$"
 [project]
 dynamic = ["version"]
 license = {file = "LICENSE.txt"}
-dependencies = ['ozi-core~=1.0.10', 'setuptools_scm[toml]', 'tomli>=2.0.0;python_version<"3.11"']
+dependencies = ['ozi-core~=1.0.11', 'setuptools_scm[toml]', 'tomli>=2.0.0;python_version<"3.11"']
 
 [project.optional_dependencies] # also meson test suite names
 # continuous integration
@@ -368,7 +368,7 @@ package = wheel
 deps =
      uv
 commands_pre =
-     python -m uv pip install OZI.build[uv,core]~=1.4
+     python -m uv pip install OZI.build[uv,core]~=1.5
      pipx install --python=python meson
 commands =
      meson setup {env_tmp_dir} -Ddist=disabled -Dtox-env-dir={env_dir}