diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index adb5e61..95e38eb 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -10,12 +10,12 @@ jobs:
     strategy:
       matrix:
         os: [ubuntu-latest, macOS-latest]
-        node: [12, 14, 16]
+        node: [18, 20]
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Use Node.js ${{matrix.node}}
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ matrix.node }}
       - name: npm install and test
@@ -30,10 +30,10 @@ jobs:
     needs: test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-node@v1
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
-          node-version: 12
+          node-version: 20
       - run: |
           npm install
           npm test
@@ -41,6 +41,6 @@ jobs:
           CI: true
       - name: Coveralls
         if: success()
-        uses: coverallsapp/github-action@master
+        uses: coverallsapp/github-action@8d6379e14d29928660c4ba802d8e85393440b329 # v2.3.8
         with:
           github-token: ${{secrets.GITHUB_TOKEN}}
diff --git a/package-lock.json b/package-lock.json
index caff79e..238d53a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -3618,7 +3618,7 @@
     },
     "uglify-js": {
       "version": "3.15.1",
-      "resolved": "https://registry.npm.ouryahoo.com:4443/npm-registry/api/npm/npm-registry/uglify-js/-/uglify-js-3.15.1.tgz",
+      "resolved": "https://registry.npmjs.org/uglify-js/-/uglify-js-3.15.1.tgz",
       "integrity": "sha1-lAPcb6VpWmFyqRvJg+o58PfJCG0="
     },
     "unpipe": {