diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index db20c5cd..b90993b0 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -20,13 +20,13 @@ jobs:
 
     steps:
       - name: Check out code
-        uses: actions/checkout@v3.5.3
+        uses: actions/checkout@v4.1.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v2.20.4
+        uses: github/codeql-action/init@v2.21.9
         with:
           languages: go
           queries: security-and-quality
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2.20.4
+        uses: github/codeql-action/analyze@v2.21.9
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index 58d25380..a53df03f 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -13,13 +13,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Install Go
-      uses: actions/setup-go@v4.0.1
+      uses: actions/setup-go@v4.1.0
       with:
         go-version: "1.18.x"
     - name: Checkout code
-      uses: actions/checkout@v3.5.3
+      uses: actions/checkout@v4.1.0
     - name: Run linters
-      uses: golangci/golangci-lint-action@v3.6.0
+      uses: golangci/golangci-lint-action@v3.7.0
       with:
         version: "v1.45.2"
 
@@ -31,11 +31,11 @@ jobs:
     steps:
     - name: Install Go
       if: success()
-      uses: actions/setup-go@v4.0.1
+      uses: actions/setup-go@v4.1.0
       with:
         go-version: "1.18.x"
     - name: Checkout code
-      uses: actions/checkout@v3.5.3
+      uses: actions/checkout@v4.1.0
     - run: go test -race ./...
     - run: go test -fuzz=. -fuzztime=30s
     - run: go test -fuzz=Plain -fuzztime=30s ./internal/charset
@@ -45,10 +45,10 @@ jobs:
   coverage:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3.5.3
+    - uses: actions/checkout@v4.1.0
     - name: Install Go
       if: success()
-      uses: actions/setup-go@v4.0.1
+      uses: actions/setup-go@v4.1.0
       with:
         go-version: "1.18.x"
     - name: Generate coverage