diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index b2f986e..b9f9832 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -8,6 +8,10 @@ updates:
       time: "06:00"
       timezone: America/New_York
     open-pull-requests-limit: 10
+    groups:
+      gomod-minor-and-patch:
+        patterns: ["*"]
+        update-types: [minor, patch]
 
   - package-ecosystem: github-actions
     directory: "/"
@@ -16,6 +20,10 @@ updates:
       day: monday
       time: "06:00"
       timezone: America/New_York
+    groups:
+      github-actions-minor-and-patch:
+        patterns: ["*"]
+        update-types: [minor, patch]
   - package-ecosystem: docker
     directory: /
     schedule:
@@ -23,3 +31,7 @@ updates:
       day: monday
       time: "06:00"
       timezone: America/New_York
+    groups:
+      docker-minor-and-patch:
+        patterns: ["*"]
+        update-types: [minor, patch]
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6c00ac6..8a12335 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -50,7 +50,7 @@ jobs:
       - name: Extract CHANGELOG section for this tag
         run: ./scripts/extract-changelog.sh "${GITHUB_REF_NAME}" > release_notes.md
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7.2.3
+        uses: goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de # v7.3.0
         with:
           # Pin the GoReleaser series so the config schema and the tool stay in
           # sync (avoids `latest` deprecating config keys out from under a release).