diff --git a/.github/workflows/push-create_tag.yaml b/.github/workflows/push-create_tag.yaml
index fbefa79955b62559c8cbbc5e9c6d0b5a27b7e8b1..6666ab6e533f5b5af1bbca8ab8d6521709bfeeaf 100644
--- a/.github/workflows/push-create_tag.yaml
+++ b/.github/workflows/push-create_tag.yaml
@@ -21,7 +21,7 @@ jobs:
       - name: Get Next Version
         if: "${{ ! startsWith(github.event.head_commit.message, 'docs: update changelog for ') }}"
         id: semver
-        uses: ietf-tools/semver-action@v1.9.0
+        uses: ietf-tools/semver-action@v1.10.0
         with:
           token: ${{ github.token }}
           branch: main
diff --git a/.github/workflows/push-rebase.yaml b/.github/workflows/push-rebase.yaml
index 48a50ba5ebb57bd986b879776b1c3e2645334b37..47426eacefda68df9af2661c1dfec37b467ea13c 100644
--- a/.github/workflows/push-rebase.yaml
+++ b/.github/workflows/push-rebase.yaml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Rebase all Dependabot's pull requests on every push to the main branch"
-        uses: bbeesley/gha-auto-dependabot-rebase@v1.5.92
+        uses: bbeesley/gha-auto-dependabot-rebase@v1.5.105
         env:
           GITHUB_TOKEN: ${{ secrets.PAT }}
       - name: "Rebase all users' pull requests on release push to the main branch"
diff --git a/update.list b/update.list
new file mode 100644
index 0000000000000000000000000000000000000000..97aff426832030deaff51aa83af040416799ad51
--- /dev/null
+++ b/update.list
@@ -0,0 +1,11 @@
+.github/
+.github/workflows/
+.github/workflows/lint.yaml
+.github/workflows/push-create_tag.yaml
+.github/workflows/push-rebase.yaml
+.github/workflows/schedule_update-from-template.yaml
+.github/workflows/tag-release.yaml
+.requirements/
+.requirements/*
+update.list
+update.sh
diff --git a/update.sh b/update.sh
index 0ecf2b5f87d37ac97d98d08e2d308f9635c03252..9d4cffc3d76fe1cc2c43883584d7981acc734d19 100755
--- a/update.sh
+++ b/update.sh
@@ -12,6 +12,8 @@ git -C .update -c advice.detachedHead=false checkout ${LATEST_TAG}
 if [[ -s .update/update.list ]]; then
   rsync -av \
     --include-from=.update/update.list \
+    --include=update.list \
+    --include=update.sh \
     --exclude=* \
     --delete-after \
     .update/ \