diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml
index 882aaa08..0788c250 100644
--- a/.github/workflows/scorecards-analysis.yml
+++ b/.github/workflows/scorecards-analysis.yml
@@ -51,6 +51,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1
+        uses: github/codeql-action/upload-sarif@9278e421667d5d90a2839487a482448c4ec7df4d # v3.27.2
         with:
           sarif_file: results.sarif
\ No newline at end of file
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 44996d59..a0a34b5c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - deps: update rust crate thiserror to 2.0.2(pr [#1179])
 - deps: update rust crate thiserror to 2.0.3(pr [#1180])
 - deps: update rust crate serde to 1.0.215(pr [#1181])
+- deps: update github/codeql-action action to v3.27.2(pr [#1182])
 
 ## [2.8.7] - 2024-11-09
 
@@ -738,6 +739,7 @@ emitted if a tracing subscriber is not found.
 [#1179]: https://github.com/jerus-org/hcaptcha-rs/pull/1179
 [#1180]: https://github.com/jerus-org/hcaptcha-rs/pull/1180
 [#1181]: https://github.com/jerus-org/hcaptcha-rs/pull/1181
+[#1182]: https://github.com/jerus-org/hcaptcha-rs/pull/1182
 [Unreleased]: https://github.com/jerus-org/hcaptcha-rs/compare/v2.8.7...HEAD
 [2.8.7]: https://github.com/jerus-org/hcaptcha-rs/compare/v2.8.6...v2.8.7
 [2.8.6]: https://github.com/jerus-org/hcaptcha-rs/compare/v2.8.5...v2.8.6
diff --git a/renovate.json b/renovate.json
index ddd1240c..eb5788a5 100644
--- a/renovate.json
+++ b/renovate.json
@@ -4,6 +4,9 @@
   "rangeStrategy": "bump",
   "semanticCommits": "enabled",
   "semanticCommitType": "fix",
+  "schedule": [
+    "before 6:00am on Friday"
+  ],
   "versioning": "cargo",
   "packageRules": [
     {