diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index bbcca53..d6dd3f5 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -85,7 +85,7 @@ jobs:
           go test ./... -coverprofile=./coverage.out
 
       # https://github.com/vladopajic/go-test-coverage
-      - uses: vladopajic/go-test-coverage@v2.19.0
+      - uses: vladopajic/go-test-coverage@v2.20.0
         with:
           config: ./.testcoverage.yml
           profile: coverage.out
diff --git a/.github/workflows/vulnerability-scan.yml b/.github/workflows/vulnerability-scan.yml
index 7974f0c..384c74f 100644
--- a/.github/workflows/vulnerability-scan.yml
+++ b/.github/workflows/vulnerability-scan.yml
@@ -22,7 +22,7 @@ permissions:
 jobs:
   scan-scheduled:
     if: ${{ github.event_name == 'push' || github.event_name == 'schedule' || github.event_name == 'workflow_dispatch' }}
-    uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v2.5.1"
+    uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v2.6.0"
     with:
       scan-args: |-
         --config ./osv-scanner-config.toml
@@ -31,7 +31,7 @@ jobs:
 
   scan-pr:
     if: ${{ github.event_name == 'pull_request' || github.event_name == 'merge_group' }}
-    uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@v2.5.1"
+    uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@v2.6.0"
     with:
       scan-args: |-
         --config ./osv-scanner-config.toml