diff --git a/.github/workflows/deploy_node.yml b/.github/workflows/deploy_node.yml
index cb702583e..80dd2ad6b 100644
--- a/.github/workflows/deploy_node.yml
+++ b/.github/workflows/deploy_node.yml
@@ -96,7 +96,7 @@ jobs:
           target: /tmp/
 
       - name: Backup deb package on the deployment server
-        uses: appleboy/ssh-action@v1.1.0
+        uses: appleboy/ssh-action@v1.2.0
         id: backup-deb
         env:
           SERVICE_NAME: ${{ env.SERVICE_NAME }}
@@ -118,7 +118,7 @@ jobs:
             rmdir $TMPDIR
 
       - name: Install deb package on the deployment server
-        uses: appleboy/ssh-action@v1.1.0
+        uses: appleboy/ssh-action@v1.2.0
         id: install-deb
         env:
           PACKAGE_NAME: ${{ env.PACKAGE_NAME }}
@@ -141,7 +141,7 @@ jobs:
             done
 
       - name: Rollback deb package on the deployment server
-        uses: appleboy/ssh-action@v1.1.0
+        uses: appleboy/ssh-action@v1.2.0
         if: ${{ failure() }}
         env:
           BACKUP_PACKAGE_PATH: ${{ env.BACKUP_PACKAGE_PATH }}
@@ -164,7 +164,7 @@ jobs:
             done
 
       - name: Clean up deb package on the deployment server
-        uses: appleboy/ssh-action@v1.1.0
+        uses: appleboy/ssh-action@v1.2.0
         if: ${{ always() }}
         env:
           PACKAGE_NAME: ${{ env.PACKAGE_NAME }}
@@ -179,7 +179,7 @@ jobs:
             rm -f /tmp/$PACKAGE_NAME
 
       - name: Clean up backup deb package on the deployment server
-        uses: appleboy/ssh-action@v1.1.0
+        uses: appleboy/ssh-action@v1.2.0
         if: ${{ always() }}
         env:
           BACKUP_PACKAGE_PATH: ${{ env.BACKUP_PACKAGE_PATH }}
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index d71472796..02bcc2295 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -73,7 +73,7 @@ jobs:
         run: export PATH="$HOME/bin:$PATH"; make ci
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@v5
         if: github.repository == 'wavesplatform/gowaves' # disable for forks
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
diff --git a/go.mod b/go.mod
index 897431114..06d23b3de 100644
--- a/go.mod
+++ b/go.mod
@@ -51,7 +51,7 @@ require (
 	golang.org/x/sync v0.9.0
 	golang.org/x/sys v0.27.0
 	google.golang.org/grpc v1.67.1
-	google.golang.org/protobuf v1.35.1
+	google.golang.org/protobuf v1.35.2
 	moul.io/zapfilter v1.7.0
 )
 
diff --git a/go.sum b/go.sum
index b7e758d77..6c83a7ed6 100644
--- a/go.sum
+++ b/go.sum
@@ -461,8 +461,8 @@ google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQ
 google.golang.org/protobuf v1.20.1-0.20200309200217-e05f789c0967/go.mod h1:A+miEFZTKqfCUM6K7xSMQL9OKL/b6hQv+e19PK+JZNE=
 google.golang.org/protobuf v1.21.0/go.mod h1:47Nbq4nVaFHyn7ilMalzfO3qCViNmqZ2kzikPIcrTAo=
 google.golang.org/protobuf v1.23.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
-google.golang.org/protobuf v1.35.1 h1:m3LfL6/Ca+fqnjnlqQXNpFPABW1UD7mjh8KO2mKFytA=
-google.golang.org/protobuf v1.35.1/go.mod h1:9fA7Ob0pmnwhb644+1+CVWFRbNajQ6iRojtC/QF5bRE=
+google.golang.org/protobuf v1.35.2 h1:8Ar7bF+apOIoThw1EdZl0p1oWvMqTHmpA2fRTyZO8io=
+google.golang.org/protobuf v1.35.2/go.mod h1:9fA7Ob0pmnwhb644+1+CVWFRbNajQ6iRojtC/QF5bRE=
 gopkg.in/alecthomas/kingpin.v2 v2.2.6/go.mod h1:FMv+mEhP44yOT+4EoQTLFTRgOQ1FBLkstjWtayDeSgw=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=