diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5edaa7e..e7fb7ba 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,10 @@
+## v1.6.3
+
+* Roll `undici` dependency to address [CVE-2024-30260][] and [CVE-2024-30261][].
+
+[CVE-2024-30260]: https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7
+[CVE-2024-30261]: https://github.com/nodejs/undici/security/advisories/GHSA-9qxr-qj54-h672
+
 ## v1.6.2
 
 * Switch to running the workflow on `node20`` from `node16`. See also
diff --git a/README.md b/README.md
index 7ff4b42..e3b2339 100644
--- a/README.md
+++ b/README.md
@@ -1,11 +1,12 @@
 # setup-dart
 
-[setup-dart](https://github.com/dart-lang/setup-dart) installs and sets up a
-Dart SDK for use in GitHub Actions; it:
+[setup-dart][] installs and sets up a Dart SDK for use in GitHub Actions; it:
 
 * downloads the Dart SDK
 * adds the [`dart`](https://dart.dev/tools/dart-tool) tool to the system path
 
+[setup-dart]: https://github.com/marketplace/actions/setup-dart-sdk
+
 ## Usage
 
 To install the latest stable Dart SDK and run typical checks: