diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index 15c70c1f7c..f57e9d940c 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -11,17 +11,17 @@ jobs:
     container: ghcr.io/rsteube/carapace
     steps:
       - name: shallow clone
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         if: "!startsWith(github.ref, 'refs/tags/')"
 
       - name: deep clone
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         if: startsWith(github.ref, 'refs/tags/')
         with:
           fetch-depth: 0
 
       - name: Set up Go
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v4
         with:
           go-version: '1.20'
       
@@ -31,7 +31,7 @@ jobs:
       - name: Build
         run: ls cmd/ | xargs -I'{}' sh -c "cd ./cmd/{} && go build -v ."
 
-      - uses: actions/upload-artifact@v2
+      - uses: actions/upload-artifact@v3
         with:
           name: carapace
           path: ./cmd/carapace/carapace 
@@ -50,7 +50,7 @@ jobs:
         run: go run ./cmd/caralint completers/*/cmd/*.go
 
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v2
+        uses: goreleaser/goreleaser-action@v4
         if: startsWith(github.ref, 'refs/tags/')
         with:
           version: latest
@@ -66,9 +66,9 @@ jobs:
     container: ghcr.io/rsteube/carapace
     needs: build
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
 
-      - uses: actions/download-artifact@v2
+      - uses: actions/download-artifact@v3
         with:
           name: carapace
           path: ./cmd/carapace
@@ -98,11 +98,11 @@ jobs:
 
 
   winget:
+    if: startsWith(github.ref, 'refs/tags/')
     runs-on: windows-latest
     needs: build
     steps:
       - uses: vedantmgoyal2009/winget-releaser@v2
-        if: startsWith(github.ref, 'refs/tags/')
         with:
           identifier: rsteube.Carapace
           max-versions-to-keep: 5