diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5e27f56..004ae4d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,14 +1,17 @@
 name: ci
 
+env:
+  DENO_VERSION: 1.x
+
 on: [push, pull_request]
 
 jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - uses: denoland/setup-deno@v1
         with:
-          deno-version: "v1.x"
+          deno-version: ${{ env.DENO_VERSION }}
       - name: Check fmt & lint & type check & test
         run: deno task check:dry
diff --git a/.github/workflows/udd.yml b/.github/workflows/udd.yml
index 9f787a8..7ac9793 100644
--- a/.github/workflows/udd.yml
+++ b/.github/workflows/udd.yml
@@ -1,6 +1,9 @@
 # ported from https://github.com/jsr-core/unknownutil/blob/v3.18.1/.github/workflows/udd.yml and modified a bit
 name: Update
 
+env:
+  DENO_VERSION: 1.x
+
 on:
   schedule:
     - cron: "0 0 * * *"
@@ -13,10 +16,10 @@ jobs:
       - uses: actions/checkout@v4
       - uses: denoland/setup-deno@v1
         with:
-          deno-version: "1.x"
+          deno-version: ${{ env.DENO_VERSION }}
       - name: Update dependencies
         run: |
-          deno task upgrade > ../output.txt
+          deno task update > ../output.txt
         env:
           NO_COLOR: 1
       - name: Read ../output.txt
diff --git a/deno.jsonc b/deno.jsonc
index f817252..1b09d38 100644
--- a/deno.jsonc
+++ b/deno.jsonc
@@ -4,7 +4,7 @@
   "tasks": {
     "check": "deno fmt && deno lint --fix && deno check --remote **/*.ts && deno test --allow-read",
     "check:dry": "deno fmt --check && deno lint && deno check --remote **/*.ts && deno test --allow-read",
-    "update:check": "deno run --allow-env --allow-read --allow-write=.,'~/.local/share/deno-wasmbuild' --allow-run=git,deno --allow-net=deno.land,raw.githubusercontent.com,esm.sh,jsr.io,registry.npmjs.org jsr:@molt/cli@0.19",
+    "update:check": "deno run --allow-env --allow-read --allow-write=.,'~/.local/share/deno-wasmbuild' --allow-run=git,deno --allow-net=deno.land,raw.githubusercontent.com,esm.sh,jsr.io,api.jsr.io,registry.npmjs.org jsr:@molt/cli@0.19",
     "update": "deno task update:check --write",
     "publish:check": "deno task check:dry && deno publish --dry-run --allow-dirty",
     "publish": "deno run --allow-env --allow-run=deno --allow-read --allow-write=deno.jsonc jsr:@david/publish-on-tag@0.1.x"