diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 78df2a9..4125a7b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -3,9 +3,9 @@ on: [push, pull_request]
 
 jobs:
   build-linux-gcc:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@v4
       - name: build
         run: |
           $CC nobuild.c -o nobuild
@@ -14,9 +14,9 @@ jobs:
           CC: gcc
           CXX: g++
   build-linux-clang:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@v4
       - name: build
         run: |
           $CC nobuild.c -o nobuild
@@ -27,7 +27,7 @@ jobs:
   build-macos:
     runs-on: macOS-latest
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@v4
       - name: build
         run: |
           $CC nobuild.c -o nobuild
@@ -36,14 +36,14 @@ jobs:
           CC: clang
           CXX: clang++
   build-windows-msvc:
-    runs-on: windows-2019
+    runs-on: windows-latest
     steps:
-      - uses: actions/checkout@v1
-        # this runs vcvarsall for us, so we get the MSVC toolchain in PATH.
-      - uses: seanmiddleditch/gha-setup-vsdevenv@master
+      - uses: actions/checkout@v4
+      - uses: TheMrMilchmann/setup-msvc-dev@v2 # prepare Visual Studio C++ toolchain
+        with:
+          arch: x64
       - name: build
-        shell: cmd
-        # this replaces default PowerShell, which can't fail the build
+        shell: cmd # this replaces default PowerShell, which can't fail the build
         run: |
           cl.exe nobuild.c
           .\nobuild.exe test