diff --git a/WORKSPACE b/WORKSPACE
index caacad3e..4f7ce9fa 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -15,21 +15,21 @@ http_archive(
 http_archive(
     name = "bazel_gazelle",
     sha256 = "29d5dafc2a5582995488c6735115d1d366fcd6a0fc2e2a153f02988706349825",
-    urls = ["https://github.com/bazelbuild/bazel-gazelle/releases/download/v0.31.0/bazel-gazelle-v0.31.0.tar.gz"],
+    urls = ["https://github.com/bazelbuild/bazel-gazelle/releases/download/v0.31.1/bazel-gazelle-v0.31.0.tar.gz"],
 )
 
 http_archive(
     name = "aspect_rules_js",
     sha256 = "0b69e0967f8eb61de60801d6c8654843076bf7ef7512894a692a47f86e84a5c2",
     strip_prefix = "rules_js-1.27.1",
-    url = "https://github.com/aspect-build/rules_js/releases/download/v1.27.1/rules_js-v1.27.1.tar.gz",
+    url = "https://github.com/aspect-build/rules_js/releases/download/v1.28.0/rules_js-v1.27.1.tar.gz",
 )
 
 http_archive(
     name = "aspect_rules_ts",
     sha256 = "ace5b609603d9b5b875d56c9c07182357c4ee495030f40dcefb10d443ba8c208",
     strip_prefix = "rules_ts-1.4.0",
-    url = "https://github.com/aspect-build/rules_ts/releases/download/v1.4.0/rules_ts-v1.4.0.tar.gz",
+    url = "https://github.com/aspect-build/rules_ts/releases/download/v1.4.2/rules_ts-v1.4.0.tar.gz",
 )
 
 http_archive(
@@ -125,7 +125,7 @@ go_rules_dependencies()
 go_register_toolchains(
     nogo = "@//:chrome_ssh_agent_nogo",
     # Use semver-coerced to handle versions where patches are left off (e.g., 1.19).
-    version = "1.20.4",  # renovate: datasource=golang-version depName=golang versioning=semver-coerced
+    version = "1.20.5",  # renovate: datasource=golang-version depName=golang versioning=semver-coerced
 )
 
 # Gazelle dependency management support