diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 38710d07..db20c5cd 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -20,13 +20,13 @@ jobs:
 
     steps:
       - name: Check out code
-        uses: actions/checkout@v3.3.0
+        uses: actions/checkout@v3.5.3
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v2.2.5
+        uses: github/codeql-action/init@v2.20.4
         with:
           languages: go
           queries: security-and-quality
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2.2.5
+        uses: github/codeql-action/analyze@v2.20.4
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index 1f0a5f33..58d25380 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -13,13 +13,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Install Go
-      uses: actions/setup-go@v3.5.0
+      uses: actions/setup-go@v4.0.1
       with:
         go-version: "1.18.x"
     - name: Checkout code
-      uses: actions/checkout@v3.3.0
+      uses: actions/checkout@v3.5.3
     - name: Run linters
-      uses: golangci/golangci-lint-action@v3.4.0
+      uses: golangci/golangci-lint-action@v3.6.0
       with:
         version: "v1.45.2"
 
@@ -31,11 +31,11 @@ jobs:
     steps:
     - name: Install Go
       if: success()
-      uses: actions/setup-go@v3.5.0
+      uses: actions/setup-go@v4.0.1
       with:
         go-version: "1.18.x"
     - name: Checkout code
-      uses: actions/checkout@v3.3.0
+      uses: actions/checkout@v3.5.3
     - run: go test -race ./...
     - run: go test -fuzz=. -fuzztime=30s
     - run: go test -fuzz=Plain -fuzztime=30s ./internal/charset
@@ -45,14 +45,14 @@ jobs:
   coverage:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3.3.0
+    - uses: actions/checkout@v3.5.3
     - name: Install Go
       if: success()
-      uses: actions/setup-go@v3.5.0
+      uses: actions/setup-go@v4.0.1
       with:
         go-version: "1.18.x"
     - name: Generate coverage
       run: go test -race -covermode=atomic -coverprofile=coverage.out
-    - uses: codecov/codecov-action@v3.1.1
+    - uses: codecov/codecov-action@v3.1.4
       with:
         files: ./coverage.out