diff --git a/.github/workflows/macos-build+deploy.yaml b/.github/workflows/macos-build+deploy.yaml
index 2a6fae6..55b692c 100644
--- a/.github/workflows/macos-build+deploy.yaml
+++ b/.github/workflows/macos-build+deploy.yaml
@@ -17,29 +17,39 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - { version: ventura, arch: x86_64, runner: macos-13, jobs: 4, prefix: /usr/local,    CXXFLAGS="-O2 -g -march=x86-64 -fPIC -DPIC"   }
-          - { version: sonoma,  arch: arm64,  runner: macos-14, jobs: 3, prefix: /opt/homebrew, CXXFLAGS="-O2 -g -march=armv8.5a -fPIC -DPIC" }
+          - { version: arm64, arch: arm64, runner: macos-15, jobs: 3, prefix: /opt/homebrew, cxxflags: "-O2 -g -march=armv8.5a -fPIC -DPIC", deployment_target: "14.0" }
     runs-on: ${{ matrix.runner }}
     env:
       JOBS: ${{ matrix.jobs }}
       DESTDIR: /tmp/DESTDIR
       OUTPUTDIR: /tmp/OUTPUT
       PREFIX: ${{ matrix.prefix }}
-      PYTHON_VERSIONS: "3.9 3.10 3.11 3.12"
+      PYTHON_VERSIONS: "3.12 3.13 3.14"
+      CFLAGS: ${{ matrix.cxxflags }}
+      CXXFLAGS: ${{ matrix.cxxflags }}
+      MACOSX_DEPLOYMENT_TARGET: ${{ matrix.deployment_target }}
     permissions:
       contents: read
       packages: write
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v7
       -
         name: Install build dependencies and workflow dependencies
         shell: bash
         run: |
           brew install \
-            autoconf automake cmake gnu-sed libtool m4 make pkg-config \
+            cmake gnu-sed make pkg-config \
             oras
+      -
+        name: Set up Python (for libboost_python)
+        uses: actions/setup-python@v7
+        with:
+          python-version: |
+            3.12
+            3.13
+            3.14
       -
         name: Create directories
         shell: bash
@@ -54,6 +64,10 @@ jobs:
         name: Build GSL
         shell: bash
         run: ./macos/${{ matrix.version }}/build-gsl.bash
+      -
+        name: Build FFTW3
+        shell: bash
+        run: ./macos/${{ matrix.version }}/build-fftw3.bash
       -
         name: Build Boost
         shell: bash
@@ -63,7 +77,7 @@ jobs:
         shell: bash
         run: |
           cd ${DESTDIR}
-          tar zcf ${OUTPUTDIR}/${{ matrix.version }}-${{ matrix.arch }}.tar.gz *
+          tar zcf ${OUTPUTDIR}/macos-${{ matrix.version }}.tar.gz *
       -
         name: Push tarball to ghcr.io
         shell: bash
@@ -71,6 +85,6 @@ jobs:
           oras login --username "${{ github.actor }}" --password "${{ secrets.GITHUB_TOKEN }}" ghcr.io
           cd ${OUTPUTDIR}
           oras push \
-            ghcr.io/eos/docker.io:${{ matrix.version }}-${{ matrix.arch }}-${GITHUB_SHA::7} \
+            ghcr.io/eos/docker.io:macos-${{ matrix.version }}-${GITHUB_SHA::7} \
             -a "org.opencontainers.image.source=https://github.com/eos/docker.io" \
-            ${{ matrix.version }}-${{ matrix.arch}}.tar.gz
+            macos-${{ matrix.version }}.tar.gz
diff --git a/.github/workflows/manylinux_2_34-build+deploy.yaml b/.github/workflows/manylinux_2_34-build+deploy.yaml
index 6667135..837d949 100644
--- a/.github/workflows/manylinux_2_34-build+deploy.yaml
+++ b/.github/workflows/manylinux_2_34-build+deploy.yaml
@@ -23,11 +23,11 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
       -
         name: Docker meta
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: eoshep/manylinux_2_34
           tags: |
@@ -35,20 +35,20 @@ jobs:
             type=raw,value=latest
       -
         name: Set up QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@v4
       -
         name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v4
       -
         name: Login to DockerHub
-        uses: docker/login-action@v2
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
       -
         name: Build and push
         id: build
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@v7
         with:
           push: ${{ github.event_name == 'push' && github.ref == 'refs/heads/master' }}
           context: manylinux_2_34/${{ matrix.arch }}
@@ -63,7 +63,7 @@ jobs:
           touch "/tmp/digests/${digest#sha256:}"
       -
         name: Upload digest
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: digest-${{ matrix.arch }}
           path: /tmp/digests/*
@@ -77,18 +77,18 @@ jobs:
     steps:
       -
         name: Download digests
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           pattern: digest-*
           path: /tmp/digests
           merge-multiple: true
       -
         name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
       -
         name: Docker meta
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: eoshep/manylinux_2_34
           tags: |
@@ -96,7 +96,7 @@ jobs:
             type=raw,value=latest
       -
         name: Login to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
@@ -109,4 +109,4 @@ jobs:
       -
         name: Inspect image
         run: |
-          docker buildx imagetools inspect eoshep/manylinux_2_34:${{ steps.meta.outputs.version }}
\ No newline at end of file
+          docker buildx imagetools inspect eoshep/manylinux_2_34:${{ steps.meta.outputs.version }}
diff --git a/macos/arm64/build-boost.bash b/macos/arm64/build-boost.bash
new file mode 100755
index 0000000..7438e7b
--- /dev/null
+++ b/macos/arm64/build-boost.bash
@@ -0,0 +1,51 @@
+set -eo pipefail
+set -x
+
+mkdir -p /tmp/boost
+pushd /tmp/boost
+
+
+echo Download the tarball
+curl -L -O https://archives.boost.io/release/1.90.0/source/boost_1_90_0.tar.gz
+
+echo Untar
+tar zxf boost_1_90_0.tar.gz
+
+echo Build Boost
+pushd boost_1_90_0
+gsed -i -e '/^#include <boost\/phoenix\/stl\/tuple\.hpp/d' boost/phoenix/stl.hpp
+echo "Build Boost (Python-independent parts)"
+./bootstrap.sh --prefix=$PREFIX --with-libraries=filesystem,math,system
+./b2 install link=shared threading=single cxxflags="${CXXFLAGS}" --prefix=${DESTDIR}/${PREFIX} -j ${JOBS}
+for pyver in ${PYTHON_VERSIONS} ; do
+    echo "Build Boost (libboost_python${pyver/./})"
+    # Use the runner's own CPython (installed by actions/setup-python from its
+    # pre-cached tool versions), not a Homebrew-installed Python: it is already
+    # present, so building/fetching one via Homebrew is pure waste. Query the
+    # interpreter itself for its layout instead of assuming a particular
+    # installation's directory structure (Homebrew's framework layout differs
+    # from the toolcache's).
+    export PYTHON=$(command -v python${pyver})
+    pyinc=$(${PYTHON} -c "import sysconfig; print(sysconfig.get_paths()['include'])")
+    pylib=$(${PYTHON} -c "import sysconfig; print(sysconfig.get_config_var('LIBDIR'))")
+    cat > user-config.jam <<EOF
+        using darwin : : clang++ ;
+        using python : ${pyver}
+                     : ${PYTHON}
+                     : ${pyinc}
+                     : ${pylib} ;
+EOF
+    gsed -i -e 's/using python/#using python/' ./bootstrap.sh
+    ./bootstrap.sh --with-python=$PYTHON --with-libraries=python
+    ./b2 install \
+        link=shared threading=single \
+        cxxflags=-std=c++14 \
+        cxxflags=-stdlib=libc++ \
+        cxxflags="${CXXFLAGS}" \
+        linkflags=-stdlib=libc++ \
+        --user-config=user-config.jam \
+        --prefix=${DESTDIR}/${PREFIX} \
+        -j ${JOBS}
+done
+popd
+popd
diff --git a/macos/arm64/build-fftw3.bash b/macos/arm64/build-fftw3.bash
new file mode 100755
index 0000000..d7c28b3
--- /dev/null
+++ b/macos/arm64/build-fftw3.bash
@@ -0,0 +1,19 @@
+set -eo pipefail
+set -x
+
+mkdir -p /tmp/fftw
+pushd /tmp/fftw
+
+echo Download the tarball
+curl -L -O https://www.fftw.org/fftw-3.3.10.tar.gz
+
+echo Untar
+tar zxf fftw-3.3.10.tar.gz
+
+pushd fftw-3.3.10
+echo Build FFTW3
+./configure --prefix=$PREFIX --enable-shared
+make -j${JOBS}
+make install DESTDIR=$DESTDIR
+popd
+popd
diff --git a/macos/arm64/build-gsl.bash b/macos/arm64/build-gsl.bash
new file mode 100755
index 0000000..2400bf6
--- /dev/null
+++ b/macos/arm64/build-gsl.bash
@@ -0,0 +1,19 @@
+set -eo pipefail
+set -x
+
+mkdir -p /tmp/gsl/build
+pushd /tmp/gsl
+
+echo Download the tarball
+curl -L -O https://ftp.gnu.org/gnu/gsl/gsl-2.8.tar.gz
+
+echo Untar
+tar zxf gsl-2.8.tar.gz
+
+pushd build
+echo Build GSL
+../gsl-2.8/configure --prefix=$PREFIX LDFLAGS="-Wl,-not_for_dyld_shared_cache"
+make -j${JOBS}
+make install DESTDIR=$DESTDIR
+popd
+popd
diff --git a/macos/sonoma/build-yaml-cpp.bash b/macos/arm64/build-yaml-cpp.bash
similarity index 68%
rename from macos/sonoma/build-yaml-cpp.bash
rename to macos/arm64/build-yaml-cpp.bash
index 3b1759c..cbca2a7 100755
--- a/macos/sonoma/build-yaml-cpp.bash
+++ b/macos/arm64/build-yaml-cpp.bash
@@ -1,18 +1,19 @@
+set -eo pipefail
 set -x
 
 mkdir -p /tmp/yaml/build
 pushd /tmp/yaml
 
 echo Download the tarball
-curl -L -O https://github.com/jbeder/yaml-cpp/archive/refs/tags/0.8.0.tar.gz
+curl -L -O https://github.com/jbeder/yaml-cpp/archive/refs/tags/yaml-cpp-0.9.0.tar.gz
 
 echo Untar
-tar zxf 0.8.0.tar.gz
+tar zxf yaml-cpp-0.9.0.tar.gz
 
 echo Build yaml-cpp
 pushd build
-cmake -DCMAKE_INSTALL_PREFIX:PATH=$PREFIX -DBUILD_SHARED_LIBS=on ../yaml-cpp-0.8.0
+cmake -DCMAKE_INSTALL_PREFIX:PATH=$PREFIX -DBUILD_SHARED_LIBS=on -DCMAKE_POLICY_VERSION_MINIMUM=3.5 ../yaml-cpp-yaml-cpp-0.9.0
 make -j${JOBS}
 make install DESTDIR=$DESTDIR
 popd
-popd
\ No newline at end of file
+popd
diff --git a/macos/sonoma/build-boost.bash b/macos/sonoma/build-boost.bash
deleted file mode 100755
index 558bf33..0000000
--- a/macos/sonoma/build-boost.bash
+++ /dev/null
@@ -1,43 +0,0 @@
-set -x
-
-mkdir -p /tmp/boost
-pushd /tmp/boost
-
-
-echo Download the tarball
-curl -L -O https://boostorg.jfrog.io/artifactory/main/release/1.85.0/source/boost_1_85_0.tar.gz
-
-echo Untar
-tar zxf boost_1_85_0.tar.gz
-
-echo Build Boost
-pushd boost_1_85_0
-gsed -i -e '/^#include <boost\/phoenix\/stl\/tuple\.hpp/d' boost/phoenix/stl.hpp
-echo "Build Boost (Python-independent parts)"
-./bootstrap.sh --prefix=$PREFIX --with-libraries=filesystem,math,system
-./b2 install link=shared threading=single --prefix=${DESTDIR}/${PREFIX} -j ${JOBS}
-for pyver in ${PYTHON_VERSIONS} ; do
-    echo "Build Boost (libboost_python${pyver/./})" 
-    pyinc=${PREFIX}/opt/python@${pyver}/Frameworks/Python.framework/Versions/${pyver}/include/python${pyver}/
-    pylib=${PREFIX}/opt/python@${pyver}/Frameworks/Python.framework/Versions/${pyver}/lib
-    export PYTHON=${PREFIX}/bin/python${pyver}
-    cat > user-config.jam <<EOF
-        using darwin : : clang++ ;
-        using python : ${pyver}
-                     : ${PYTHON}
-                     : ${pyinc}
-                     : ${pylib} ;
-EOF
-    gsed -i -e 's/using python/#using python/' ./bootstrap.sh
-    ./bootstrap.sh --with-python=$PYTHON --with-python-root=${PREFIX} --with-libraries=python
-    ./b2 install \
-        link=shared threading=single \
-        cxxflags=-std=c++14 \
-        cxxflags=-stdlib=libc++ \
-        linkflags=-stdlib=libc++ \
-        --user-config=user-config.jam \
-        --prefix=${DESTDIR}/${PREFIX} \
-        -j ${JOBS}
-done
-popd
-popd
\ No newline at end of file
diff --git a/macos/sonoma/build-gsl.bash b/macos/sonoma/build-gsl.bash
deleted file mode 100755
index 33b2f72..0000000
--- a/macos/sonoma/build-gsl.bash
+++ /dev/null
@@ -1,18 +0,0 @@
-set -x
-
-mkdir -p /tmp/gsl/build
-pushd /tmp/gsl
-
-echo Download the tarball
-curl -L -O https://ftp.gnu.org/gnu/gsl/gsl-2.7.tar.gz
-
-echo Untar
-tar zxf gsl-2.7.tar.gz
-
-pushd build
-echo Build GSL
-../gsl-2.7/configure --prefix=$PREFIX LDFLAGS="-Wl,-not_for_dyld_shared_cache"
-make -j${JOBS} 
-make install DESTDIR=$DESTDIR
-popd
-popd
\ No newline at end of file
diff --git a/macos/ventura/build-boost.bash b/macos/ventura/build-boost.bash
deleted file mode 100755
index 558bf33..0000000
--- a/macos/ventura/build-boost.bash
+++ /dev/null
@@ -1,43 +0,0 @@
-set -x
-
-mkdir -p /tmp/boost
-pushd /tmp/boost
-
-
-echo Download the tarball
-curl -L -O https://boostorg.jfrog.io/artifactory/main/release/1.85.0/source/boost_1_85_0.tar.gz
-
-echo Untar
-tar zxf boost_1_85_0.tar.gz
-
-echo Build Boost
-pushd boost_1_85_0
-gsed -i -e '/^#include <boost\/phoenix\/stl\/tuple\.hpp/d' boost/phoenix/stl.hpp
-echo "Build Boost (Python-independent parts)"
-./bootstrap.sh --prefix=$PREFIX --with-libraries=filesystem,math,system
-./b2 install link=shared threading=single --prefix=${DESTDIR}/${PREFIX} -j ${JOBS}
-for pyver in ${PYTHON_VERSIONS} ; do
-    echo "Build Boost (libboost_python${pyver/./})" 
-    pyinc=${PREFIX}/opt/python@${pyver}/Frameworks/Python.framework/Versions/${pyver}/include/python${pyver}/
-    pylib=${PREFIX}/opt/python@${pyver}/Frameworks/Python.framework/Versions/${pyver}/lib
-    export PYTHON=${PREFIX}/bin/python${pyver}
-    cat > user-config.jam <<EOF
-        using darwin : : clang++ ;
-        using python : ${pyver}
-                     : ${PYTHON}
-                     : ${pyinc}
-                     : ${pylib} ;
-EOF
-    gsed -i -e 's/using python/#using python/' ./bootstrap.sh
-    ./bootstrap.sh --with-python=$PYTHON --with-python-root=${PREFIX} --with-libraries=python
-    ./b2 install \
-        link=shared threading=single \
-        cxxflags=-std=c++14 \
-        cxxflags=-stdlib=libc++ \
-        linkflags=-stdlib=libc++ \
-        --user-config=user-config.jam \
-        --prefix=${DESTDIR}/${PREFIX} \
-        -j ${JOBS}
-done
-popd
-popd
\ No newline at end of file
diff --git a/macos/ventura/build-gsl.bash b/macos/ventura/build-gsl.bash
deleted file mode 100755
index 33b2f72..0000000
--- a/macos/ventura/build-gsl.bash
+++ /dev/null
@@ -1,18 +0,0 @@
-set -x
-
-mkdir -p /tmp/gsl/build
-pushd /tmp/gsl
-
-echo Download the tarball
-curl -L -O https://ftp.gnu.org/gnu/gsl/gsl-2.7.tar.gz
-
-echo Untar
-tar zxf gsl-2.7.tar.gz
-
-pushd build
-echo Build GSL
-../gsl-2.7/configure --prefix=$PREFIX LDFLAGS="-Wl,-not_for_dyld_shared_cache"
-make -j${JOBS} 
-make install DESTDIR=$DESTDIR
-popd
-popd
\ No newline at end of file
diff --git a/macos/ventura/build-yaml-cpp.bash b/macos/ventura/build-yaml-cpp.bash
deleted file mode 100755
index 3b1759c..0000000
--- a/macos/ventura/build-yaml-cpp.bash
+++ /dev/null
@@ -1,18 +0,0 @@
-set -x
-
-mkdir -p /tmp/yaml/build
-pushd /tmp/yaml
-
-echo Download the tarball
-curl -L -O https://github.com/jbeder/yaml-cpp/archive/refs/tags/0.8.0.tar.gz
-
-echo Untar
-tar zxf 0.8.0.tar.gz
-
-echo Build yaml-cpp
-pushd build
-cmake -DCMAKE_INSTALL_PREFIX:PATH=$PREFIX -DBUILD_SHARED_LIBS=on ../yaml-cpp-0.8.0
-make -j${JOBS}
-make install DESTDIR=$DESTDIR
-popd
-popd
\ No newline at end of file
diff --git a/manylinux_2_34/aarch64/Dockerfile b/manylinux_2_34/aarch64/Dockerfile
index 44f0e30..09eea34 100644
--- a/manylinux_2_34/aarch64/Dockerfile
+++ b/manylinux_2_34/aarch64/Dockerfile
@@ -1,8 +1,10 @@
 FROM quay.io/pypa/manylinux_2_34_aarch64:2026.04.04-1
 
+# GSL is built from source below on every architecture; the distribution's package is
+# older (2.6) and is deliberately not installed.
 RUN yum -y install chrpath cmake git libtool \
-  && yum -y clean all \
-  && rm -rf /var/cache/yum
+ && yum -y clean all \
+ && rm -rf /var/cache/yum
 
 # installation destination of the pkg-config file is hardcoded to /usr/lib/pkgconfig
 RUN mkdir -p /yaml/build \
@@ -21,9 +23,9 @@ RUN mkdir -p /yaml/build \
 # install GSL
 RUN mkdir /gsl \
  && pushd /gsl \
- && curl -L -O https://ftp.gnu.org/gnu/gsl/gsl-2.7.tar.gz \
- && tar zxf /gsl/gsl-2.7.tar.gz \
- && pushd gsl-2.7 \
+ && curl -L -O https://ftp.gnu.org/gnu/gsl/gsl-2.8.tar.gz \
+ && tar zxf /gsl/gsl-2.8.tar.gz \
+ && pushd gsl-2.8 \
  && ./configure --prefix=/usr \
  && make -j4 \
  && make install \
diff --git a/manylinux_2_34/x86_64/Dockerfile b/manylinux_2_34/x86_64/Dockerfile
index 82d8f49..fcd9b73 100644
--- a/manylinux_2_34/x86_64/Dockerfile
+++ b/manylinux_2_34/x86_64/Dockerfile
@@ -1,6 +1,10 @@
 FROM quay.io/pypa/manylinux_2_34_x86_64:2026.04.04-1
 
-RUN yum -y install chrpath cmake git gsl gsl-devel libtool
+# GSL is built from source below on every architecture; the distribution's package is
+# older (2.6) and is deliberately not installed.
+RUN yum -y install chrpath cmake git libtool \
+ && yum -y clean all \
+ && rm -rf /var/cache/yum
 
 # installation destination of the pkg-config file is hardcoded to /usr/lib/pkgconfig
 #  - using -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to avoid https://github.com/jbeder/yaml-cpp/issues/1352
@@ -20,9 +24,9 @@ RUN mkdir -p /yaml/build \
 # install GSL
 RUN mkdir /gsl \
  && pushd /gsl \
- && curl -L -O https://ftp.gnu.org/gnu/gsl/gsl-2.7.tar.gz \
- && tar zxf /gsl/gsl-2.7.tar.gz \
- && pushd gsl-2.7 \
+ && curl -L -O https://ftp.gnu.org/gnu/gsl/gsl-2.8.tar.gz \
+ && tar zxf /gsl/gsl-2.8.tar.gz \
+ && pushd gsl-2.8 \
  && ./configure --prefix=/usr \
  && make -j4 \
  && make install \