diff --git a/.github/renovate.json b/.github/renovate.json
index 4eeaa37e..e1942ac1 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -41,6 +41,12 @@
         "// renovate: datasource=(?<datasource>[a-z-]+?) depName=(?<depName>.+?)(?: versioning=(?<versioning>[a-z-]+?))?\\s+readonly\\s+tag\\s+=\\s+'(?<currentValue>.+?)';"
       ],
       "versioningTemplate": "{{#if versioning}}{{versioning}}{{else}}semver{{/if}}"
+    },
+    {
+      "fileMatch": ["^\\.github/workflows/[^/]+\\.ya?ml$"],
+      "matchStrings": ["uses: (?<depName>[a-z-/]+?)@(?<currentValue>.+?)\\s"],
+      "datasourceTemplate": "github-tags",
+      "versioningTemplate": "docker"
     }
   ]
 }
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 469b0350..ab8cd740 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -26,22 +26,20 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2.1.0
+        uses: actions/checkout@v2.3.3
         with:
           fetch-depth: 0
       - name: Lint commit messages
-        uses: wagoid/commitlint-github-action@v1.6.0
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        uses: wagoid/commitlint-github-action@v2.1.0
 
   lint:
     needs: [cleanup]
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2.1.0
+        uses: actions/checkout@v2.3.3
       - name: Setup node
-        uses: actions/setup-node@v1.4.1
+        uses: actions/setup-node@v1.4.4
         with:
           node-version: '12.x'
       - name: Install project
@@ -58,7 +56,7 @@ jobs:
         configurationFile: [example/renovate-config.js, example/renovate.json]
     steps:
       - name: Checkout
-        uses: actions/checkout@v2.1.0
+        uses: actions/checkout@v2.3.3
       - name: Install project
         run: npm ci
       - name: Build
@@ -84,7 +82,7 @@ jobs:
       && github.ref == 'refs/heads/master'
     steps:
       - name: Checkout
-        uses: actions/checkout@v2.1.0
+        uses: actions/checkout@v2.3.3
         with:
           fetch-depth: 0
           ref: 'release'
@@ -98,7 +96,7 @@ jobs:
         run: |
           git merge -m 'chore(release): merge master (${{ github.sha }})' ${{ github.sha }}
       - name: Setup node
-        uses: actions/setup-node@v1.4.1
+        uses: actions/setup-node@v1.4.4
         with:
           node-version: '12.x'
       - name: Install project
@@ -119,7 +117,7 @@ jobs:
       - name: Publish release
         run: git push --follow-tags
       - name: Publish GitHub release
-        uses: actions/create-release@v1.0.1
+        uses: actions/create-release@v1.1.4
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
diff --git a/src/docker.ts b/src/docker.ts
index 13ffcb9b..6bcfe6af 100644
--- a/src/docker.ts
+++ b/src/docker.ts
@@ -1,7 +1,7 @@
 class Docker {
   readonly repository = 'renovate/renovate';
   // renovate: datasource=docker depName=renovate/renovate versioning=docker
-  readonly tag = '23.49.2-slim';
+  readonly tag = '23.49.6-slim';
   readonly tagSuffix = '-slim';
 
   image(): string {