diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index 79eb29f..d1bc4eb 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -19,10 +19,10 @@ jobs:
           - "1.25"
           - "stable"
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v7
         with:
           go-version: ${{ matrix.go }}
 
@@ -33,7 +33,7 @@ jobs:
         run: go test -bench=. -coverprofile=coverage.out ./...
 
       - name: Run Gosec Security Scanner
-        uses: securego/gosec@v2.23.0
+        uses: securego/gosec@v2.29.0
         with:
           args: ./...
 
@@ -44,7 +44,7 @@ jobs:
           go tool cover -html=coverage.out -o=coveragereport.html.out
 
       - name: Publish code coverage badge (and optional report)
-        uses: linkdata/gitcoverage@v7
+        uses: linkdata/gitcoverage@v11
         with:
           coverage: ${{ steps.coverage.outputs.coverage }}
           report:   "coveragereport.html.out"
diff --git a/README.md b/README.md
index 7595ed7..cd1d85b 100644
--- a/README.md
+++ b/README.md
@@ -1,5 +1,5 @@
 [![build](https://github.com/linkdata/bwlimit/actions/workflows/go.yml/badge.svg)](https://github.com/linkdata/bwlimit/actions/workflows/go.yml)
-[![coverage](https://github.com/linkdata/bwlimit/blob/coverage/main/badge.svg)](https://html-preview.github.io/?url=https://github.com/linkdata/bwlimit/blob/coverage/main/report.html)
+[![coverage](https://github.com/linkdata/bwlimit/blob/gitcoverage/main/badge.svg)](https://html-preview.github.io/?url=https://github.com/linkdata/bwlimit/blob/gitcoverage/main/report.html)
 [![Docs](https://godoc.org/github.com/linkdata/bwlimit?status.svg)](https://godoc.org/github.com/linkdata/bwlimit)
 
 # bwlimit