diff --git a/.github/workflows/on-pr.yaml b/.github/workflows/on-pr.yaml
index a72503b..443b543 100755
--- a/.github/workflows/on-pr.yaml
+++ b/.github/workflows/on-pr.yaml
@@ -20,7 +20,7 @@ jobs:
         with:
           go-version-file: 'go.mod'
       - name: Verify ent files
-        uses: ent/contrib/ci
+        uses: ent/contrib/ci@master
 
   lint:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/pre-commit-checks.yaml b/.github/workflows/pre-commit-checks.yaml
index 407f08e..ca6a3cf 100755
--- a/.github/workflows/pre-commit-checks.yaml
+++ b/.github/workflows/pre-commit-checks.yaml
@@ -18,6 +18,6 @@ jobs:
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - name: Run against changes
-        uses: pre-commit/action@v3.0.0
+        uses: pre-commit/action@v3.0.1
         with:
           extra_args: --files ${{ join(fromJson(inputs.modifiedFiles), ' ') }} --config .ci/pre-commit/config.yaml
diff --git a/.github/workflows/publish-snapshot.yaml b/.github/workflows/publish-snapshot.yaml
index 6f3eeb9..a71c17b 100755
--- a/.github/workflows/publish-snapshot.yaml
+++ b/.github/workflows/publish-snapshot.yaml
@@ -18,7 +18,7 @@
           with:
             go-version-file: 'go.mod'
         - name: Verify ent files
-          uses: ent/contrib/ci
+          uses: ent/contrib/ci@master
 
     tests:
       runs-on: ubuntu-latest
diff --git a/.github/workflows/versioned-release.yaml b/.github/workflows/versioned-release.yaml
index 8aa5436..a84e608 100755
--- a/.github/workflows/versioned-release.yaml
+++ b/.github/workflows/versioned-release.yaml
@@ -18,7 +18,7 @@ jobs:
         with:
           go-version-file: 'go.mod'
       - name: Verify ent files
-        uses: ent/contrib/ci
+        uses: ent/contrib/ci@master
 
   tests:
     runs-on: ubuntu-latest
diff --git a/Dockerfile b/Dockerfile
index d2a17c2..addc218 100755
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.21-alpine@sha256:a6a7f1fcf12f5efa9e04b1e75020931a616cd707f14f62ab5262bfbe109aa84a as build
+FROM golang:1.22-alpine@sha256:eba0670e527735bed965a32217e5db1f895c544619d726cccb62b1be6d11f287 as build
 
 ARG TARGETPLATFORM
 ENV TARGETPLATFORM=${TARGETPLATFORM:-linux/amd64}