diff --git a/.github/workflows/build_and_test.yml b/.github/workflows/build_and_test.yml
index 32add2e..4a5ba3d 100644
--- a/.github/workflows/build_and_test.yml
+++ b/.github/workflows/build_and_test.yml
@@ -6,6 +6,9 @@ on:
     branches:
       - 'main'
 
+permissions:
+  contents: write # https://github.com/gradle/actions/blob/main/setup-gradle/README.md#basic-usage
+
 jobs:
   build_and_test_with_code_coverage:
     name: Build, test and upload code coverage
@@ -20,12 +23,14 @@ jobs:
         with:
           distribution: temurin
           java-version: 11
-      - uses: gradle/gradle-build-action@v2
-        name: build and test
+      - uses: gradle/actions/setup-gradle@v3
+        name: Setup Gradle
         with:
-          arguments: check build -x detekt -Pdetekt.multiplatform.disabled=true --scan
           gradle-version: wrapper
+          cache-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}
           dependency-graph: generate-and-submit
+      - name: build and test
+        run: ./gradlew check build -x detekt -Pdetekt.multiplatform.disabled=true --scan
       - name: Upload test reports
         if: ${{ failure() }}  # runs only if previous step has failed, the entire workflow will still be marked as failed
         uses: actions/upload-artifact@v4
@@ -38,11 +43,8 @@ jobs:
           flags: unittests
           fail_ci_if_error: true # optional (default = false)
           
-      - uses: gradle/gradle-build-action@v2
-        name: run detekt
-        with:
-          arguments: check -Pdetekt.multiplatform.disabled=false -PdetektAutoCorrect=true
-          gradle-version: wrapper
+      - name: run detekt
+        run: ./gradlew check -Pdetekt.multiplatform.disabled=false -PdetektAutoCorrect=true
       - run: git status && git diff
         if: ${{ always() }}
       - uses: reviewdog/action-suggester@v1
diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties
index 46671ac..4baf5a1 100644
--- a/gradle/wrapper/gradle-wrapper.properties
+++ b/gradle/wrapper/gradle-wrapper.properties
@@ -1,7 +1,7 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionSha256Sum=3e1af3ae886920c3ac87f7a91f816c0c7c436f276a6eefdb3da152100fef72ae
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.4-bin.zip
+distributionSha256Sum=9631d53cf3e74bfa726893aee1f8994fee4e060c401335946dba2156f440f24c
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.6-bin.zip
 networkTimeout=10000
 validateDistributionUrl=true
 zipStoreBase=GRADLE_USER_HOME
diff --git a/settings.gradle.kts b/settings.gradle.kts
index fdc44df..8ee4059 100644
--- a/settings.gradle.kts
+++ b/settings.gradle.kts
@@ -6,7 +6,7 @@ pluginManagement {
 }
 
 plugins {
-    id("com.gradle.enterprise") version("3.15.1")
+    id("com.gradle.enterprise") version("3.16.2")
     id("org.ajoberstar.reckon.settings") version("0.18.0")
 }