diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 9b3906ea5..0cb4a1e2d 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3.4.0
+        uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3 # v3.5.0
         with:
           persist-credentials: false
 
diff --git a/README.md b/README.md
index 0cc37b56d..8a6d6bd28 100644
--- a/README.md
+++ b/README.md
@@ -52,7 +52,7 @@ If you are using Maven without BOM, add this to your dependencies:
 If you are using Gradle 5.x or later, add this to your dependencies:
 
 ```Groovy
-implementation platform('com.google.cloud:libraries-bom:26.10.0')
+implementation platform('com.google.cloud:libraries-bom:26.11.0')
 
 implementation 'com.google.cloud:google-cloud-bigquery'
 ```