diff --git a/.gitea/workflows/golang-linters.yaml b/.gitea/workflows/golang-linters.yaml
index dc51552..8d07359 100644
--- a/.gitea/workflows/golang-linters.yaml
+++ b/.gitea/workflows/golang-linters.yaml
@@ -20,10 +20,10 @@ jobs:
         go: [ stable ]
         os: [ ubuntu-latest-amd64, ubuntu-latest-arm64 ]
     steps:
-    - uses: actions/checkout@v6.0.2
+    - uses: actions/checkout@v6.0.3
     - uses: actions/setup-go@v6.4.0
       with:
         go-version: ${{ matrix.go }}
-    - uses: golangci/golangci-lint-action@v9.2.0
+    - uses: golangci/golangci-lint-action@v9.2.1
       with:
-        version: v2.9.0 # renovate: datasource=github-releases depName=golangci/golangci-lint
+        version: v2.12.2 # renovate: datasource=github-releases depName=golangci/golangci-lint
diff --git a/.gitea/workflows/golang-tests.yaml b/.gitea/workflows/golang-tests.yaml
index 0bf8c58..6d9a2d7 100644
--- a/.gitea/workflows/golang-tests.yaml
+++ b/.gitea/workflows/golang-tests.yaml
@@ -33,7 +33,7 @@ jobs:
         go: [ stable ]
         os: [ ubuntu-latest-amd64, ubuntu-latest-arm64 ]
     steps:
-    - uses: actions/checkout@v6.0.2
+    - uses: actions/checkout@v6.0.3
     - uses: actions/setup-go@v6.4.0
       with:
         go-version: ${{ matrix.go }}
diff --git a/.gitea/workflows/markdown-linters.yaml b/.gitea/workflows/markdown-linters.yaml
index 27b3e82..f1a80e6 100644
--- a/.gitea/workflows/markdown-linters.yaml
+++ b/.gitea/workflows/markdown-linters.yaml
@@ -13,7 +13,7 @@ jobs:
     name: "Run markdown linter"
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6.0.2
+    - uses: actions/checkout@v6.0.3
     - uses: DavidAnson/markdownlint-cli2-action@v21.0.0
       with:
         globs: '**/*.md'
diff --git a/.gitea/workflows/release.yaml b/.gitea/workflows/release.yaml
index 3a92ad7..498351b 100644
--- a/.gitea/workflows/release.yaml
+++ b/.gitea/workflows/release.yaml
@@ -12,16 +12,16 @@ jobs:
     name: "Release application"
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6.0.2
+    - uses: actions/checkout@v6.0.3
       with:
         fetch-depth: 0
-    - uses: docker/setup-qemu-action@v4.0.0
+    - uses: docker/setup-qemu-action@v4.1.0
       with:
         image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
     - uses: actions/setup-go@v6.4.0
       with:
         go-version: stable
-    - uses: docker/login-action@v4.1.0
+    - uses: docker/login-action@v4.2.0
       with:
         registry: git.cryptic.systems
         username: ${{ github.repository_owner }}
@@ -30,9 +30,9 @@ jobs:
         GITEA_TOKEN: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
         GONOSUMDB: ${{ vars.GONOSUMDB }}
         GOPROXY: ${{ vars.GOPROXY }}
-      uses: goreleaser/goreleaser-action@v7.1.0
+      uses: goreleaser/goreleaser-action@v7.2.2
       with:
-        version: v2.15.3 # renovate: datasource=github-releases depName=goreleaser/goreleaser
+        version: v2.16.0 # renovate: datasource=github-releases depName=goreleaser/goreleaser
         args: release --clean
 
   sync-to-hub-docker-io:
diff --git a/.gitea/workflows/update-docker-hub-description.yaml b/.gitea/workflows/update-docker-hub-description.yaml
index 2497011..10d27df 100644
--- a/.gitea/workflows/update-docker-hub-description.yaml
+++ b/.gitea/workflows/update-docker-hub-description.yaml
@@ -11,7 +11,7 @@ jobs:
     runs-on:
     - ubuntu-latest
     steps:
-    - uses: actions/checkout@v6.0.2
+    - uses: actions/checkout@v6.0.3
     - uses: peter-evans/dockerhub-description@v5.0.0
       with:
         username: ${{ secrets.DOCKER_IO_USERNAME }}