diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d4c95b6..68be842 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: semantic-release
         id: semantic
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index 35a159a..7449a45 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -7,11 +7,13 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.sha || github.ref }}
 
       - uses: actions/setup-node@v3
         with:
-          node-version: 18.7.0
+          node-version: 20.11.0
 
       - run: npm ci
 
diff --git a/.nvmrc b/.nvmrc
index 805b5a4..7ea6a59 100644
--- a/.nvmrc
+++ b/.nvmrc
@@ -1 +1 @@
-v20.9.0
+v20.11.0
diff --git a/Dockerfile b/Dockerfile
index f4e02d5..29e43db 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:20.9.0
+FROM node:20.11.0
 
 # nice clean home for our action files
 RUN mkdir /action