diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5f112374..f022e06d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -107,6 +107,10 @@ jobs:
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: clippy, rustfmt
+      # The Rust quality gate runs cargo audit and cargo deny, pinned by hyperi-ci.
+      - uses: hyperi-io/hyperi-ci/.github/actions/setup-rust-tools@main
+      # make test-rust runs the suite under cargo-nextest, pinned by hyperi-ci.
+      - uses: hyperi-io/hyperi-ci/.github/actions/setup-nextest@main
       # Pin the interpreter pyo3-build-config finds so the build does not
       # depend on the runner image's default.
       - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
@@ -320,7 +324,7 @@ jobs:
         run: ${{ env.HYPERCI_INSTALL }} tag-head --bump ${{ inputs.bump }}
 
       - name: Download the built wheels
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v7.0.0
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           pattern: vector-vrl-wheel-*
           path: vector-vrl/dist/