diff --git a/.github/workflows/gh-pages.yml b/.github/workflows/gh-pages.yml
index b864063..7208001 100644
--- a/.github/workflows/gh-pages.yml
+++ b/.github/workflows/gh-pages.yml
@@ -37,7 +37,7 @@ jobs:
     runs-on: ubuntu-latest
     env:
       # renovate: datasource=github-releases depName=gohugoio/hugo
-      HUGO_VERSION: 0.144.0
+      HUGO_VERSION: 0.144.2
     steps:
       - name: Install Hugo CLI
         run: |
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 3cc5cd5..63a2762 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     env:
       # renovate: datasource=github-releases depName=gohugoio/hugo
-      HUGO_VERSION: 0.144.0
+      HUGO_VERSION: 0.144.2
     steps:
       - name: Install Hugo CLI
         run: |
@@ -55,7 +55,7 @@ jobs:
 
       - name: Restore lychee cache
         id: restore-cache
-        uses: actions/cache/restore@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4
+        uses: actions/cache/restore@0c907a75c2c80ebcb7f088228285e798b750cf8f # v4
         with:
             path: .lycheecache
             key: cache-lychee-${{ github.sha }}
@@ -78,7 +78,7 @@ jobs:
           labels: report, automated issue
 
       - name: Save lychee cache
-        uses: actions/cache/save@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4
+        uses: actions/cache/save@0c907a75c2c80ebcb7f088228285e798b750cf8f # v4
         if: always()
         with:
           path: .lycheecache
diff --git a/package-lock.json b/package-lock.json
index 3b7136c..8450311 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1032,9 +1032,9 @@
       }
     },
     "node_modules/hugo-extended": {
-      "version": "0.144.0",
-      "resolved": "https://registry.npmjs.org/hugo-extended/-/hugo-extended-0.144.0.tgz",
-      "integrity": "sha512-USVChoALYkfi4RyFwPAAWhHEHfvtYexAO0FbCZ2VAP9buEasHAW74Wptq9ZCUCaEHnZ7oOEZP89dxvDuygr0Ug==",
+      "version": "0.144.1",
+      "resolved": "https://registry.npmjs.org/hugo-extended/-/hugo-extended-0.144.1.tgz",
+      "integrity": "sha512-SMXTW7uJToyoTaneBX90Epme2Ae1udlY4S+8KPZwD2nk6F6ypu+g9aVsC4jwvo0udTx/f1/xlQ87n5r2XhzRTA==",
       "hasInstallScript": true,
       "license": "MIT",
       "dependencies": {
@@ -1543,9 +1543,9 @@
       }
     },
     "node_modules/postcss": {
-      "version": "8.5.2",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.2.tgz",
-      "integrity": "sha512-MjOadfU3Ys9KYoX0AdkBlFEF1Vx37uCCeN4ZHnmwm9FfpbsGWMZeBLMmmpY+6Ocqod7mkdZ0DT31OlbsFrLlkA==",
+      "version": "8.5.3",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.3.tgz",
+      "integrity": "sha512-dle9A3yYxlBSrt8Fu+IpjGT8SY8hN0mlaA6GY8t0P5PjIOZemULz/E2Bnm/2dcUOena75OTNkHI76uZBNUUq3A==",
       "funding": [
         {
           "type": "opencollective",