diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..5b71152
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,19 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: "daily"
+    groups:
+      gha:
+        patterns:
+          - "*"
+
+  - package-ecosystem: gomod
+    directory: /
+    schedule:
+      interval: daily
+    groups:
+      go:
+        patterns:
+          - "*"
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 5e81200..bd8ae09 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -10,28 +10,5 @@ on:
 
 jobs:
   build:
-    runs-on: ${{ matrix.os }}
-    strategy:
-      fail-fast: false
-      matrix:
-        os:
-          - macos-13
-          - macos-14
-          - ubuntu-22.04
-          - windows-2022
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - uses: actions/setup-go@v5
-        with:
-          go-version-file: go.work
-          cache-dependency-path: "**/go.sum"
-
-      - name: run checks
-        run: go run build check
-
-      - name: build snapshot
-        if: startsWith(matrix.os, 'ubuntu-')
-        run: go run build snapshot
+    uses: wasilibs/actions/.github/workflows/ci.yaml@5a7938d4c66f2abd4b99eed54a6fc322a029bf4d
+    secrets: inherit
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index f15b3ac..f32fbd0 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -6,18 +6,6 @@ on:
       - v*
 
 jobs:
-  build:
-    name: Release
-    runs-on: ubuntu-22.04
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - uses: actions/setup-go@v5
-        with:
-          go-version-file: go.work
-
-      - run: go run build release
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+  release:
+    uses: wasilibs/actions/.github/workflows/release.yaml@b661aa384cbc5de5d04b4d99b9dc5bbeaeb247d3
+    secrets: inherit
diff --git a/.github/workflows/update-upstream.yaml b/.github/workflows/update-upstream.yaml
deleted file mode 100644
index 1cac3c5..0000000
--- a/.github/workflows/update-upstream.yaml
+++ /dev/null
@@ -1,41 +0,0 @@
-name: "Update Upstream"
-
-on:
-  schedule:
-    - cron: "5 4 * * *"
-  workflow_dispatch:
-
-jobs:
-  build:
-    name: Update Upstream
-    runs-on: ubuntu-22.04
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - uses: actions/setup-go@v5
-        with:
-          go-version-file: go.work
-          cache-dependency-path: "**/go.sum"
-
-      - run: go run build update
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      
-      - run: git diff --exit-code
-        id: check-diff
-        continue-on-error: true
-
-      - name: create PR
-        if: steps.check-diff.outcome == 'failure'
-        run: |
-          git config --global user.name "github-actions[bot]"
-          git config --global user.email "github-actions[bot]@users.noreply.github.com"
-          git checkout -b update-upstream-${{ github.run_id }}
-          git add .
-          git commit -m "Update to latest upstream"
-          git push -u origin -f update-upstream-${{ github.run_id }}
-          gh pr create --fill --head update-upstream-${{ github.run_id }}
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/update.yaml b/.github/workflows/update.yaml
new file mode 100644
index 0000000..b98df7f
--- /dev/null
+++ b/.github/workflows/update.yaml
@@ -0,0 +1,11 @@
+name: "Update Upstream"
+
+on:
+  schedule:
+    - cron: "5 4 * * *"
+  workflow_dispatch:
+
+jobs:
+  build:
+    uses: wasilibs/actions/.github/workflows/update.yaml@b661aa384cbc5de5d04b4d99b9dc5bbeaeb247d3
+    secrets: inherit
diff --git a/buildtools/wasm/version.txt b/buildtools/wasm/version.txt
index 77fed2f..a8a3eb0 100644
--- a/buildtools/wasm/version.txt
+++ b/buildtools/wasm/version.txt
@@ -1 +1 @@
-v1.64.2
\ No newline at end of file
+v1.64.1
\ No newline at end of file