diff --git a/.github/workflows/buddy-bot.yml b/.github/workflows/buddy-bot.yml
index 61ac8c49a72..6caa722fa4d 100644
--- a/.github/workflows/buddy-bot.yml
+++ b/.github/workflows/buddy-bot.yml
@@ -130,7 +130,7 @@ jobs:
 
       - name: Setup PHP and Composer (if needed)
         if: ${{ hashFiles('composer.json') != '' }}
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@2.35.5
         with:
           php-version: '8.4'
           tools: composer
@@ -248,7 +248,7 @@ jobs:
 
       - name: Setup PHP and Composer (if needed)
         if: ${{ hashFiles('composer.json') != '' }}
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@2.35.5
         with:
           php-version: '8.4'
           tools: composer
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 137df6ce2dd..4eb85e69cb9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,13 +18,13 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.0
 
       - name: Install Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.0.2
 
       - name: Use cached node_modules
-        uses: actions/cache@v4
+        uses: actions/cache@v4.3.0
         with:
           path: node_modules
           key: node-modules-${{ hashFiles('**/bun.lock') }}
@@ -41,13 +41,13 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.0
 
       - name: Install Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.0.2
 
       - name: Use cached node_modules
-        uses: actions/cache@v4
+        uses: actions/cache@v4.3.0
         with:
           path: node_modules
           key: node-modules-${{ hashFiles('**/bun.lock') }}
@@ -64,13 +64,13 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.0
 
       - name: Install Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.0.2
 
       - name: Use cached node_modules
-        uses: actions/cache@v4
+        uses: actions/cache@v4.3.0
         with:
           path: node_modules
           key: node-modules-${{ hashFiles('**/bun.lock') }}
@@ -86,13 +86,13 @@ jobs:
   publish-commit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.0
 
       - name: Install Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.0.2
 
       - name: Use cached node_modules
-        uses: actions/cache@v4
+        uses: actions/cache@v4.3.0
         with:
           path: node_modules
           key: node-modules-${{ hashFiles('**/bun.lock') }}
diff --git a/package.json b/package.json
index 11d9aa1af34..e194b8196cb 100644
--- a/package.json
+++ b/package.json
@@ -93,6 +93,6 @@
   "devDependencies": {
     "@stacksjs/docs": "^0.70.23",
     "@stacksjs/eslint-config": "^4.14.0-beta.3",
-    "better-dx": "^0.1.7"
+    "better-dx": "^0.2.0"
   }
 }
diff --git a/packages/benchmarks/package.json b/packages/benchmarks/package.json
index a84c7e895ca..28751960508 100644
--- a/packages/benchmarks/package.json
+++ b/packages/benchmarks/package.json
@@ -17,12 +17,12 @@
   "dependencies": {
     "@stacksjs/markdown": "workspace:*",
     "@stacksjs/sanitizer": "workspace:*",
-    "dompurify": "^3.2.7",
+    "dompurify": "^3.3.0",
     "gray-matter": "^4.0.3",
-    "isomorphic-dompurify": "^2.28.0",
+    "isomorphic-dompurify": "^2.30.1",
     "js-yaml": "^4.1.0",
     "markdown-it": "^14.1.0",
-    "marked": "^16.4.0",
+    "marked": "^16.4.1",
     "remark": "^15.0.1",
     "remark-html": "^16.0.1",
     "sanitize-html": "^2.17.0",
@@ -34,6 +34,6 @@
     "@types/dompurify": "^3.2.0",
     "@types/marked": "^6.0.0",
     "@types/sanitize-html": "^2.16.0",
-    "jsdom": "^27.0.0"
+    "jsdom": "^27.0.1"
   }
 }
diff --git a/packages/vscode/deps.yaml b/packages/vscode/deps.yaml
index 158cd0e20a7..7eee06d277e 100644
--- a/packages/vscode/deps.yaml
+++ b/packages/vscode/deps.yaml
@@ -1,3 +1,3 @@
 dependencies:
-  bun.sh: ^1.2.10
-  node: ^23.9.0
+  bun.sh: ^1.3.0
+  node: ^23.11.1
diff --git a/packages/vscode/package.json b/packages/vscode/package.json
index f4eaf71c0b1..6302a65806d 100644
--- a/packages/vscode/package.json
+++ b/packages/vscode/package.json
@@ -530,10 +530,10 @@
     "theme": "light"
   },
   "devDependencies": {
-    "@types/vscode": "^1.80.0",
-    "@vscode/vsce": "^3.6.0",
-    "typescript": "^5.8.3",
-    "vscode-html-languageservice": "^5.5.1",
+    "@types/vscode": "^1.105.0",
+    "@vscode/vsce": "^3.6.3-0",
+    "typescript": "^5.9.3",
+    "vscode-html-languageservice": "^5.6.0",
     "vscode-languageclient": "^9.0.1",
     "vscode-languageserver-textdocument": "^1.0.12",
     "vscode-languageserver-types": "^3.17.5"
diff --git a/packages/zyte/deps.yaml b/packages/zyte/deps.yaml
index bb6da0f110e..6fe98068f4f 100644
--- a/packages/zyte/deps.yaml
+++ b/packages/zyte/deps.yaml
@@ -1,2 +1,2 @@
 dependencies:
-  zig: ^0.15.0
+  zig: ^0.15.1