diff --git a/.github/workflows/binaries.yaml b/.github/workflows/binaries.yaml
index 051c3c0a..eb465327 100644
--- a/.github/workflows/binaries.yaml
+++ b/.github/workflows/binaries.yaml
@@ -1,6 +1,16 @@
 name: Build binaries
 
-on: workflow_dispatch
+on:
+  workflow_dispatch:
+  # also test this workflow and build scripts in CI when changed
+  push:
+    paths:
+      - '.github/workflows/binaries.yaml'
+      - 'macosx/*.sh'
+  pull_request:
+    paths:
+      - '.github/workflows/binaries.yaml'
+      - 'macosx/*.sh'
 
 jobs:
 
diff --git a/macosx/build_thirdparty.sh b/macosx/build_thirdparty.sh
index 4f64a7c0..1119d239 100755
--- a/macosx/build_thirdparty.sh
+++ b/macosx/build_thirdparty.sh
@@ -56,10 +56,10 @@ LIB_PNG_URL="https://github.com/glennrp/libpng.git"
 LIB_FREETYPE_URL="https://gitlab.freedesktop.org/freetype/freetype.git"
 LIB_OPENSSL_URL="https://github.com/openssl/openssl.git"
 
-LIB_SDL_TAG="release-2.30.0"
+LIB_SDL_TAG="release-2.30.2"
 LIB_SDL_IMAGE_TAG="release-2.8.2"
 LIB_SDL_TTF_TAG="release-2.22.0"
-LIB_PNG_TAG="v1.6.42"
+LIB_PNG_TAG="v1.6.43"
 LIB_FREETYPE_TAG="VER-2-13-2"
 LIB_OPENSSL_TAG="OpenSSL_1_1_1w"