diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 1e845c2..1e755e8 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,12 +1,14 @@
 version: 2
 
 updates:
-  - package-ecosystem: 'gomod'
-    directory: '/'
+  - package-ecosystem: "gomod"
+    directory: "/"
     schedule:
-      interval: 'weekly'
+      interval: "weekly"
+      time: "04:00"
+      timezone: "US/Eastern"
 
-  - package-ecosystem: 'github-actions'
-    directory: '/'
+  - package-ecosystem: "github-actions"
+    directory: "/"
     schedule:
-      interval: 'weekly'
+      interval: "weekly"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5bfe794..5cae2e4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -2,15 +2,18 @@ name: CI
 
 on:
   push:
-    branches: [ 'main' ]
+    branches: ["main"]
   pull_request:
-    branches: [ 'main' ]
+    branches: ["main"]
   schedule:
-    # 08:00 on Saturday.
-    - cron: '0 8 * * 6'
+    # 08:00 UTC on Saturday.
+    - cron: "0 8 * * 6"
 
 jobs:
   go:
+    strategy:
+      matrix:
+        go: ["1.22"]
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -18,7 +21,7 @@ jobs:
       - name: Setup
         uses: actions/setup-go@v5
         with:
-          go-version: '1.22'
+          go-version: ${{ matrix.go }}
 
       - name: Test
         run: go test -v ./...
@@ -34,8 +37,10 @@ jobs:
       - name: Lint
         uses: dominikh/staticcheck-action@v1
         with:
-          version: 'v0.4.7'
+          version: "v0.4.7"
+          min-go-version: ${{ matrix.go }}
           install-go: false
+          cache-key: ${{ matrix.go }}
 
   python:
     runs-on: ubuntu-latest
@@ -45,7 +50,7 @@ jobs:
       - name: Format
         uses: chartboost/ruff-action@v1
         with:
-          args: 'format --check'
+          args: "format --check"
 
       - name: Lint
         uses: chartboost/ruff-action@v1
@@ -58,12 +63,12 @@ jobs:
       - name: Setup Python
         uses: actions/setup-python@v5
         with:
-          python-version: '3.12'
+          python-version: "3.12"
 
       - name: Setup Go
         uses: actions/setup-go@v5
         with:
-          go-version: '1.22'
+          go-version: "1.22"
 
       - name: Run extra CI checks
         run: python etc/ci-check.py
diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml
index 76f71fc..ef0c868 100644
--- a/.github/workflows/dependabot-automerge.yml
+++ b/.github/workflows/dependabot-automerge.yml
@@ -2,13 +2,13 @@ name: Dependabot auto-merge
 on: pull_request
 
 permissions:
-  pull-requests: write
   contents: write
+  pull-requests: write
 
 jobs:
   dependabot-automerge:
     runs-on: ubuntu-latest
-    if: ${{ github.actor == 'dependabot[bot]' }}
+    if: ${{ github.actor == "dependabot[bot]" }}
     env:
       PR_URL: ${{ github.event.pull_request.html_url }}
       GH_TOKEN: ${{ github.token }}