diff --git a/.github/workflows/go-check.yml b/.github/workflows/go-check.yml
index 25e1afd..251f7fa 100644
--- a/.github/workflows/go-check.yml
+++ b/.github/workflows/go-check.yml
@@ -11,12 +11,12 @@ jobs:
     env:
       RUNGOGENERATE: false
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           submodules: recursive
-      - uses: actions/setup-go@v2
+      - uses: actions/setup-go@v3
         with:
-          go-version: "1.18.x"
+          go-version: "1.19.x"
       - name: Run repo-specific setup
         uses: ./.github/actions/go-check-setup
         if: hashFiles('./.github/actions/go-check-setup') != ''
@@ -27,7 +27,7 @@ jobs:
             echo "RUNGOGENERATE=true" >> $GITHUB_ENV
           fi
       - name: Install staticcheck
-        run: go install honnef.co/go/tools/cmd/staticcheck@d7e217c1ff411395475b2971c0824e1e7cc1af98 # 2022.1 (v0.3.0)
+        run: go install honnef.co/go/tools/cmd/staticcheck@376210a89477dedbe6fdc4484b233998650d7b3c # 2022.1.3 (v0.3.3)
       - name: Check that go.mod is tidy
         uses: protocol/multiple-go-modules@v1.2
         with:
diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index b86241a..8a1697b 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -10,16 +10,16 @@ jobs:
       fail-fast: false
       matrix:
         os: [ "ubuntu", "windows", "macos" ]
-        go: [ "1.17.x", "1.18.x" ]
+        go: [ "1.18.x", "1.19.x" ]
     env:
       COVERAGES: ""
     runs-on: ${{ format('{0}-latest', matrix.os) }}
     name: ${{ matrix.os }} (go ${{ matrix.go }})
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           submodules: recursive
-      - uses: actions/setup-go@v2
+      - uses: actions/setup-go@v3
         with:
           go-version: ${{ matrix.go }}
       - name: Go information
@@ -43,7 +43,7 @@ jobs:
           # Use -coverpkg=./..., so that we include cross-package coverage.
           # If package ./A imports ./B, and ./A's tests also cover ./B,
           # this means ./B's coverage will be significantly higher than 0%.
-          run: go test -v -coverprofile=module-coverage.txt -coverpkg=./... ./...
+          run: go test -v -shuffle=on -coverprofile=module-coverage.txt -coverpkg=./... ./...
       - name: Run tests (32 bit)
         if: ${{ matrix.os != 'macos' }} # can't run 32 bit tests on OSX.
         uses: protocol/multiple-go-modules@v1.2
@@ -52,7 +52,7 @@ jobs:
         with:
           run: |
             export "PATH=${{ env.PATH_386 }}:$PATH"
-            go test -v ./...
+            go test -v -shuffle=on ./...
       - name: Run tests with race detector
         if: ${{ matrix.os == 'ubuntu' }} # speed things up. Windows and OSX VMs are slow
         uses: protocol/multiple-go-modules@v1.2
@@ -62,7 +62,7 @@ jobs:
         shell: bash
         run: echo "COVERAGES=$(find . -type f -name 'module-coverage.txt' | tr -s '\n' ',' | sed 's/,$//')" >> $GITHUB_ENV
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@f32b3a3741e1053eb607407145bc9619351dc93b # v2.1.0
+        uses: codecov/codecov-action@81cd2dc8148241f03f5839d295e000b8f761e378 # v3.1.0
         with:
           files: '${{ env.COVERAGES }}'
           env_vars: OS=${{ matrix.os }}, GO=${{ matrix.go }}
diff --git a/go.mod b/go.mod
index 42f4021..eee9a7f 100644
--- a/go.mod
+++ b/go.mod
@@ -62,4 +62,4 @@ require (
 	google.golang.org/protobuf v1.27.1 // indirect
 )
 
-go 1.17
+go 1.18
diff --git a/mfs_test.go b/mfs_test.go
index 1ea90ef..ace1f76 100644
--- a/mfs_test.go
+++ b/mfs_test.go
@@ -7,7 +7,6 @@ import (
 	"errors"
 	"fmt"
 	"io"
-	"io/ioutil"
 	"math/rand"
 	"os"
 	"sort"
@@ -176,7 +175,7 @@ func assertFileAtPath(ds ipld.DAGService, root *Directory, expn ipld.Node, pth s
 		return err
 	}
 
-	out, err := ioutil.ReadAll(rfd)
+	out, err := io.ReadAll(rfd)
 	if err != nil {
 		return err
 	}
@@ -199,7 +198,7 @@ func catNode(ds ipld.DAGService, nd *dag.ProtoNode) ([]byte, error) {
 	}
 	defer r.Close()
 
-	return ioutil.ReadAll(r)
+	return io.ReadAll(r)
 }
 
 func setupRoot(ctx context.Context, t *testing.T) (ipld.DAGService, *Root) {
@@ -831,7 +830,7 @@ func actorReadFile(d *Directory) error {
 		return err
 	}
 
-	_, err = ioutil.ReadAll(rfd)
+	_, err = io.ReadAll(rfd)
 	if err != nil {
 		return err
 	}
@@ -1116,7 +1115,7 @@ func writeFile(rt *Root, path string, transform func([]byte) []byte) error {
 	}
 	defer fd.Close()
 
-	data, err := ioutil.ReadAll(fd)
+	data, err := io.ReadAll(fd)
 	if err != nil {
 		return err
 	}
@@ -1383,7 +1382,7 @@ func TestTruncateAndWrite(t *testing.T) {
 			t.Fatal(err)
 		}
 
-		data, err := ioutil.ReadAll(fd)
+		data, err := io.ReadAll(fd)
 		if err != nil {
 			t.Fatal(err)
 		}
diff --git a/repub.go b/repub.go
index 2c9dbd2..4638104 100644
--- a/repub.go
+++ b/repub.go
@@ -87,10 +87,10 @@ func (rp *Republisher) Update(c cid.Cid) {
 // updates.
 //
 // Algorithm:
-//   1. When we receive the first update after publishing, we set a `longer` timer.
-//   2. When we receive any update, we reset the `quick` timer.
-//   3. If either the `quick` timeout or the `longer` timeout elapses,
-//      we call `publish` with the latest updated value.
+//  1. When we receive the first update after publishing, we set a `longer` timer.
+//  2. When we receive any update, we reset the `quick` timer.
+//  3. If either the `quick` timeout or the `longer` timeout elapses,
+//     we call `publish` with the latest updated value.
 //
 // The `longer` timer ensures that we delay publishing by at most
 // `TimeoutLong`. The `quick` timer allows us to publish sooner if