diff --git a/.github/workflows/esy.yml b/.github/workflows/esy.yml
index 43c7df0..72c9f7f 100644
--- a/.github/workflows/esy.yml
+++ b/.github/workflows/esy.yml
@@ -15,9 +15,9 @@ jobs:
 
     steps:
       - name: Setup node.js
-        uses: actions/setup-node@v2.1.2
+        uses: actions/setup-node@v3.5.1
         with:
-          node-version: '14'
+          node-version: "16"
           check-latest: true
 
       # Install `esy` to build the project
@@ -28,9 +28,9 @@ jobs:
           npm i -g shx
 
       - name: Checkout project
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
         with:
-          submodules: 'recursive'
+          submodules: "recursive"
 
       - name: Install local dependencies
         run: |
@@ -38,10 +38,10 @@ jobs:
 
       - name: Esy cache
         id: esy-cache
-        uses: actions/cache@v2
+        uses: actions/cache@v3.0.11
         with:
           path: _export
-          key:  ${{ runner.os }}-esy-${{ hashFiles('esy.lock/index.json') }}
+          key: ${{ runner.os }}-esy-${{ hashFiles('esy.lock/index.json') }}
 
       - name: Import esy cache
         if: steps.esy-cache.outputs.cache-hit == 'true'
diff --git a/.github/workflows/opam.yml b/.github/workflows/opam.yml
index 45cbf42..71b39f1 100644
--- a/.github/workflows/opam.yml
+++ b/.github/workflows/opam.yml
@@ -12,11 +12,11 @@ jobs:
       fail-fast: false
       matrix:
         os: [ubuntu-latest, macos-latest, windows-latest]
-        ocaml-compiler: [4.12.0, 4.13.1, 4.14.0]
+        ocaml-compiler: [4.12.1, 4.13.1, 4.14.0]
 
     steps:
       - name: Checkout project
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
         with:
           submodules: "recursive"
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a28c35f..72b8e82 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,7 +12,7 @@ jobs:
       release_created: ${{ steps.release.outputs.release_created }}
       tag_name: ${{ steps.release.outputs.tag_name }}
     steps:
-      - uses: GoogleCloudPlatform/release-please-action@v3.1.0
+      - uses: GoogleCloudPlatform/release-please-action@v3.6.0
         id: release
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
@@ -35,7 +35,7 @@ jobs:
           brew install git-archive-all
 
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
         with:
           submodules: "recursive"
 
@@ -45,7 +45,7 @@ jobs:
 
       - name: Upload Release Asset
         id: upload
-        uses: grain-lang/upload-release-action@v3.0.1
+        uses: grain-lang/upload-release-action@v3.0.2
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           file: ./binaryen-archive.tar.gz
@@ -83,9 +83,9 @@ jobs:
           echo -n "$CHANGES" > CHANGES.md
 
       - name: Setup OCaml
-        uses: avsm/setup-ocaml@v1
+        uses: ocaml/setup-ocaml@v2
         with:
-          ocaml-version: 4.12.0
+          ocaml-compiler: 4.14.0
 
       # Version 2.1.0 of opam-publish doesn't respect OPAMYES=1
       # Ref https://github.com/ocaml-opam/opam-publish/issues/132#issuecomment-963616802
@@ -103,9 +103,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Setup NodeJS
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@v3.5.1
         with:
-          node-version: "14"
+          node-version: "16"
           registry-url: "https://registry.npmjs.org"
 
       - name: Publish to npm