diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index aea13b83..c9d80aeb 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 5a8ad1bf..42ac91b4 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -27,10 +27,17 @@ jobs:
     runs-on: windows-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
+      - name: Azure login
+        uses: azure/login@v2
+        with:
+          client-id: ${{ secrets.AZURE_CLIENT_ID }}
+          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
+          subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
+
       - name: Setup .NET SDK (net8.0, net9.0)
         uses: actions/setup-dotnet@v5
         with:
@@ -45,7 +52,7 @@ jobs:
         shell: bash
         run: |
           dotnet tool restore
-          dotnet make publish \
+          dotnet make publish --sign \
             --nuget-key="${{secrets.NUGET_API_KEY}}" \
             --keyvaultUrl="${{secrets.SIGN_KEYVAULT_URL}}" \
             --keyvaultCertificate="${{secrets.SIGN_KEYVAULT_CERTIFICATE}}"
@@ -60,7 +67,7 @@ jobs:
     runs-on: windows-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       with:
         fetch-depth: 0