diff --git a/.github/workflows/assign-author.yml b/.github/workflows/assign-author.yml
index 332de0d..d9f536f 100644
--- a/.github/workflows/assign-author.yml
+++ b/.github/workflows/assign-author.yml
@@ -15,4 +15,4 @@ jobs:
 
     steps:
       - name: Assign author
-        uses: toshimaru/auto-author-assign@v3.0.1
+        uses: toshimaru/auto-author-assign@4d585cc37690897bd9015942ed6e766aa7cdb97f # v3.0.1
diff --git a/.github/workflows/draft-release-notes.yml b/.github/workflows/draft-release-notes.yml
index 01760da..9dd4f9d 100644
--- a/.github/workflows/draft-release-notes.yml
+++ b/.github/workflows/draft-release-notes.yml
@@ -20,6 +20,6 @@ jobs:
 
     steps:
       - name: Draft release notes
-        uses: release-drafter/release-drafter@v7
+        uses: release-drafter/release-drafter@3a7fb5c85b80b1dda66e1ccb94009adbbd32fce3 # v7
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/test-php.yml b/.github/workflows/test-php.yml
index f7ffd74..3f45ea8 100644
--- a/.github/workflows/test-php.yml
+++ b/.github/workflows/test-php.yml
@@ -19,16 +19,16 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Cache Composer dependencies
-        uses: actions/cache@v5
+        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5
         with:
           path: /tmp/composer-cache
           key: ${{ runner.os }}-${{ hashFiles('**/composer.lock') }}
 
       - name: Setup PHP
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # v2
         with:
           php-version: ${{ matrix.php-versions }}
 
diff --git a/composer.json b/composer.json
index 5c6b38c..bdb33d8 100644
--- a/composer.json
+++ b/composer.json
@@ -16,20 +16,20 @@
     },
     "require": {
         "php": ">=8.1",
-        "behat/behat": "^3.18"
+        "behat/behat": "^3.29.0"
     },
     "require-dev": {
-        "behat/mink": "^1.8",
-        "dealerdirect/phpcodesniffer-composer-installer": "^1.0",
+        "behat/mink": "^1.13.0",
+        "dealerdirect/phpcodesniffer-composer-installer": "^1.2.0",
         "drevops/behat-phpserver": "^2",
-        "ergebnis/composer-normalize": "^2.45",
+        "ergebnis/composer-normalize": "^2.50.0",
         "escapestudios/symfony2-coding-standard": "^3",
         "phpstan/phpstan": "^2",
-        "phpunit/phpunit": "^11.0",
+        "phpunit/phpunit": "^11.5.55",
         "rector/rector": "^2",
         "squizlabs/php_codesniffer": "^3",
         "symfony/process": "^6 || ^7.0 || ^8.0",
-        "drupal/coder": "^8.3",
+        "drupal/coder": "^8.3.31",
         "drevops/phpcs-standard": "^0.7"
     },
     "autoload": {