diff --git a/.github/workflows/buddy-bot.yml b/.github/workflows/buddy-bot.yml
index 4ed077f46bb..acbf3ad4c0c 100644
--- a/.github/workflows/buddy-bot.yml
+++ b/.github/workflows/buddy-bot.yml
@@ -130,7 +130,7 @@ jobs:
 
       - name: Setup PHP and Composer (if needed)
         if: ${{ hashFiles('composer.json') != '' }}
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@2.35.5
         with:
           php-version: '8.4'
           tools: composer
@@ -248,7 +248,7 @@ jobs:
 
       - name: Setup PHP and Composer (if needed)
         if: ${{ hashFiles('composer.json') != '' }}
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@2.35.5
         with:
           php-version: '8.4'
           tools: composer
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index fca38404ae7..a69aefbdb26 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -16,14 +16,14 @@ jobs:
           fetch-depth: 0
 
       - name: Install Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.0.2
         # env:
         #   BUN_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
         with:
           bun-version: latest
 
       - name: Use cached node_modules
-        uses: actions/cache@v4
+        uses: actions/cache@v4.3.0
         with:
           path: node_modules
           key: node-modules-${{ hashFiles('**/bun.lock') }}
diff --git a/package.json b/package.json
index aadf6391dbf..2dd337ce09d 100644
--- a/package.json
+++ b/package.json
@@ -96,7 +96,7 @@
     "@types/bun": "^1.3.0",
     "better-dx": "^0.1.7",
     "buddy-bot": "^0.9.9",
-    "bun-plugin-dtsx": "^0.9.5",
+    "bun-plugin-dtsx": "^0.21.12",
     "typescript": "^5.9.3"
   }
 }
diff --git a/packages/benchmarks/package.json b/packages/benchmarks/package.json
index a84c7e895ca..68a1a902f21 100644
--- a/packages/benchmarks/package.json
+++ b/packages/benchmarks/package.json
@@ -17,12 +17,12 @@
   "dependencies": {
     "@stacksjs/markdown": "workspace:*",
     "@stacksjs/sanitizer": "workspace:*",
-    "dompurify": "^3.2.7",
+    "dompurify": "^3.3.0",
     "gray-matter": "^4.0.3",
-    "isomorphic-dompurify": "^2.28.0",
+    "isomorphic-dompurify": "^2.29.0",
     "js-yaml": "^4.1.0",
     "markdown-it": "^14.1.0",
-    "marked": "^16.4.0",
+    "marked": "^16.4.1",
     "remark": "^15.0.1",
     "remark-html": "^16.0.1",
     "sanitize-html": "^2.17.0",
@@ -34,6 +34,6 @@
     "@types/dompurify": "^3.2.0",
     "@types/marked": "^6.0.0",
     "@types/sanitize-html": "^2.16.0",
-    "jsdom": "^27.0.0"
+    "jsdom": "^27.0.1"
   }
 }
diff --git a/packages/vscode/deps.yaml b/packages/vscode/deps.yaml
index 158cd0e20a7..7eee06d277e 100644
--- a/packages/vscode/deps.yaml
+++ b/packages/vscode/deps.yaml
@@ -1,3 +1,3 @@
 dependencies:
-  bun.sh: ^1.2.10
-  node: ^23.9.0
+  bun.sh: ^1.3.0
+  node: ^23.11.1
diff --git a/packages/vscode/package.json b/packages/vscode/package.json
index f4eaf71c0b1..3cfd1789dab 100644
--- a/packages/vscode/package.json
+++ b/packages/vscode/package.json
@@ -530,10 +530,10 @@
     "theme": "light"
   },
   "devDependencies": {
-    "@types/vscode": "^1.80.0",
-    "@vscode/vsce": "^3.6.0",
+    "@types/vscode": "^1.105.0",
+    "@vscode/vsce": "^3.6.3-0",
     "typescript": "^5.8.3",
-    "vscode-html-languageservice": "^5.5.1",
+    "vscode-html-languageservice": "^5.6.0",
     "vscode-languageclient": "^9.0.1",
     "vscode-languageserver-textdocument": "^1.0.12",
     "vscode-languageserver-types": "^3.17.5"
diff --git a/packages/zyte/deps.yaml b/packages/zyte/deps.yaml
index bb6da0f110e..6fe98068f4f 100644
--- a/packages/zyte/deps.yaml
+++ b/packages/zyte/deps.yaml
@@ -1,2 +1,2 @@
 dependencies:
-  zig: ^0.15.0
+  zig: ^0.15.1