diff --git a/.github/workflows/package-macos.yml b/.github/workflows/package-macos.yml
index c9b1eb27..538af2c9 100644
--- a/.github/workflows/package-macos.yml
+++ b/.github/workflows/package-macos.yml
@@ -34,13 +34,11 @@ jobs:
       - name: Set up Python
         uses: actions/setup-python@v7
         with:
-          python-version: 3.11
+          python-version: 3.13.17
           cache: 'pip'
       - name: Install python dependencies
         run: |
-          python -m pip install "pip @ https://files.pythonhosted.org/packages/3f/06/3e4420302363fbb71be3c7f35ce042f54bfca330e3e66b3a2e3c4cca579f/pip-26.2.2-py3-none-any.whl#sha256=fd7f4dfa8190e014013b9f08f3e973f4e4c26ffd179a204895533a7254813a70"
-          python -m pip install 'certifi>=2026.10.19'
-          python -m pip install --upgrade pip pyinstaller
+          python -m pip install --upgrade pip certifi pyinstaller
           pip install -r requirements.txt
       - name: Install the Apple certificate and provisioning profile
 #        TODO signing
diff --git a/.github/workflows/package-osx-legacy.yml b/.github/workflows/package-osx-legacy.yml
index 525241c4..0a729b45 100644
--- a/.github/workflows/package-osx-legacy.yml
+++ b/.github/workflows/package-osx-legacy.yml
@@ -38,11 +38,11 @@ jobs:
         run: |
           sudo installer -pkg python.pkg -target /
       - name: Install Python dependencies
+        # Legacy macOS needs Python 3.11, so this emudhra workaround is needed
         run: |
           python3 --version
-          python -m pip install "pip @ https://files.pythonhosted.org/packages/3f/06/3e4420302363fbb71be3c7f35ce042f54bfca330e3e66b3a2e3c4cca579f/pip-26.2.2-py3-none-any.whl#sha256=fd7f4dfa8190e014013b9f08f3e973f4e4c26ffd179a204895533a7254813a70"
-          python -m pip install 'certifi>=2026.10.19'
-          pip3 install --upgrade pip pyinstaller
+          python3 -m pip install "pip @ https://files.pythonhosted.org/packages/3f/06/3e4420302363fbb71be3c7f35ce042f54bfca330e3e66b3a2e3c4cca579f/pip-26.2.2-py3-none-any.whl#sha256=fd7f4dfa8190e014013b9f08f3e973f4e4c26ffd179a204895533a7254813a70"
+          pip3 install --upgrade pip certifi pyinstaller
           pip3 install --upgrade -r requirements-osx-legacy.txt
           ./gen_ui_files.sh
       - uses: actions/setup-node@v7