diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5150fa2..7d233fc 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -48,7 +48,7 @@ jobs:
           GITHUB_TOKEN: ${{ github.token }}
 
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v6
+        uses: goreleaser/goreleaser-action@v7
         with:
           version: latest
           args: release --clean
diff --git a/.golangci.yml b/.golangci.yml
index 5302ffd..c16ace1 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -88,6 +88,8 @@ linters:
     gosec:
       excludes:
         - G104 # Errors not checked, handled by errcheck
+        - G704 # Taint analysis false positive
+        - G705 # Taint analysis false positive
 
     govet:
       enable-all: true
diff --git a/internal/dead/dead.go b/internal/dead/dead.go
index e4a2a56..1c97b50 100644
--- a/internal/dead/dead.go
+++ b/internal/dead/dead.go
@@ -149,7 +149,7 @@ func (d Dead) Check(ctx context.Context, options CheckOptions) error {
 	}
 	results := collect(ctx, workers...)
 
-	var sorted []CheckResult //nolint:prealloc // It's channels so we don't actually know
+	var sorted []CheckResult
 	for result := range results {
 		sorted = append(sorted, result)
 	}