diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index 77ee959e..38889e22 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -63,7 +63,7 @@ jobs:
           key:          ${{ runner.os }}-go-${{ matrix.golang }}-v1-${{ hashFiles('**/go.sum') }}
           restore-keys: ${{ runner.os }}-go-${{ matrix.golang }}-v1-
       - name: Run GoReleaser (Dry Run)
-        uses: goreleaser/goreleaser-action@v3.0.0
+        uses: goreleaser/goreleaser-action@v4.1.0
         with:
           version: latest
           args: release --rm-dist --snapshot --skip-publish
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1ecc5c4c..0d036c55 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -45,7 +45,7 @@ jobs:
       -
         name: Run GoReleaser
         if: steps.semantic.outputs.new-release-published == 'true' && steps.repoman.outputs.has-go-binary == 'true'
-        uses: goreleaser/goreleaser-action@v3.0.0
+        uses: goreleaser/goreleaser-action@v4.1.0
         with:
           version: latest
           args: release --rm-dist
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index 82222dc7..9c051cd0 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -30,7 +30,7 @@ jobs:
         env:
           SCORECARD_READ_TOKEN: ${{ secrets.SCORECARD_READ_TOKEN }}
         if: env.SCORECARD_READ_TOKEN != null
-        uses: ossf/scorecard-action@937ffa90d79c7d720498178154ad4c7ba1e4ad8c # v1.0.4
+        uses: ossf/scorecard-action@e38b1902ae4f44df626f11ba0734b14fb91f8f86 # v2.1.2
         with:
           results_file: results.sarif
           results_format: sarif
diff --git a/tool/lint/package.json b/tool/lint/package.json
index 81b1272e..3a58f667 100644
--- a/tool/lint/package.json
+++ b/tool/lint/package.json
@@ -1,6 +1,6 @@
 {
   "dependencies": {
-    "alex": "10.0.0",
+    "alex": "11.0.0",
     "markdown-spellcheck": "1.3.1",
     "markdownlint-cli": "0.31.1",
     "remark-cli": "11.0.0",