diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..96505a9
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,10 @@
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    commit-message:
+      prefix: "ci(dependabot):"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 713dcac..48e07ae 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -72,11 +72,11 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ubuntu-22.04, windows-2022]
+        os: [ubuntu-latest, windows-latest]
         include:
-          - os: macos-12
+          - os: macos-13
             macos_arch: "x86_64"
-          - os: macos-12
+          - os: macos-latest
             macos_arch: "arm64"
 
     steps:
@@ -89,8 +89,9 @@ jobs:
           toolset: "14.2"
 
       - name: Build wheels
-        uses: pypa/cibuildwheel@v2.19
+        uses: pypa/cibuildwheel@v2.22
         env:
+          CIBW_VERBOSE: 1
           CIBW_ARCHS_MACOS: "${{ matrix.macos_arch }}"
           # Python on Linux is usually configured to add debug information,
           # which increases binary size by ~11-fold. Remove for the builds we
diff --git a/pyproject.toml b/pyproject.toml
index 52a9590..3e1b868 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 # https://peps.python.org/pep-0517/
 [build-system]
-requires = ["setuptools ==72.1.0", "swig >=4.1", "numpy>=2.0.0"]
+requires = ["setuptools ==72.1.0", "swig ==4.2.1", "numpy>=2.0.0"]
 build-backend = "setuptools.build_meta"
 
 # https://peps.python.org/pep-0621/
@@ -57,6 +57,8 @@ test-skip = "*-macosx_arm64"
 [tool.cibuildwheel.macos]
 # https://cibuildwheel.readthedocs.io/en/stable/faq/#apple-silicon
 archs = ["x86_64", "arm64"]
+# Needed for C++17 support on macOS
+environment = { MACOSX_DEPLOYMENT_TARGET = "10.14" }
 
 [tool.check-manifest]
 ignore = [".editorconfig", "Dockerfile", "maintainer-notes.md", ".gitmodules"]