diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 20e0de2..27845cb 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -16,18 +16,20 @@ jobs:
     name: coverage
     runs-on: ubuntu-latest
     container:
-      image: xd009642/tarpaulin:develop-nightly
+      image: xd009642/tarpaulin:latest-slim
       options: --security-opt seccomp=unconfined
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           persist-credentials: false
-      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
+      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
       - name: Generate code coverage
         run: cargo tarpaulin --verbose --all-features --workspace --timeout 120 --out xml
+      - name: Install codecov-action dependencies
+        run: apt update && apt install -y --no-install-recommends git gpg
       - name: Upload coverage report to codecov.io
-        uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3
+        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
         with:
           token: ${{ secrets.CODECOV_TOKEN }} # required
           fail_ci_if_error: true
@@ -35,10 +37,10 @@ jobs:
   clippy_check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           persist-credentials: false
-      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
+      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
       - name: Run Clippy
         run: cargo clippy --all-targets --all-features
         env:
@@ -48,7 +50,7 @@ jobs:
     name: Check semantic version compatibility
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       with:
         persist-credentials: false
     - uses: obi1kenobi/cargo-semver-checks-action@5b298c9520f7096a4683c0bd981a7ac5a7e249ae # v2.8
@@ -61,10 +63,10 @@ jobs:
       actions: read # only needed for private repos
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           persist-credentials: false
 
       - name: Run zizmor 🌈
-        uses: zizmorcore/zizmor-action@f52a838cfabf134edcbaa7c8b3677dde20045018 # v0.1.1
+        uses: zizmorcore/zizmor-action@e639db99335bc9038abc0e066dfcd72e23d26fb4 # v0.3.0
 
diff --git a/Cargo.toml b/Cargo.toml
index 02fca8c..158363f 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "rust_jarm"
-version = "0.3.7"
+version = "0.3.8"
 authors = ["Hugo-C"]
 edition = "2024"
 license = "MIT"
@@ -19,7 +19,7 @@ rand = "^0.9"
 sha2 = "^0.10"
 
 [dev-dependencies]
-rstest = "~0.25"
+rstest = "~0.26"
 
 [lints.rust]
  unexpected_cfgs = { level = "warn", check-cfg = ['cfg(tarpaulin_include)'] }
\ No newline at end of file
diff --git a/README.md b/README.md
index 33e8fe5..bb8c165 100644
--- a/README.md
+++ b/README.md
@@ -10,7 +10,7 @@ rust_jarm is a library to compute JARM fingerprint. It is more or less a direct
 put in Cargo.toml:
 ```
 [dependencies]
-rust_jarm = "0.3.7"
+rust_jarm = "0.3.8"
 ```
 
 ## Usage
@@ -19,7 +19,7 @@ rust_jarm = "0.3.7"
     let host = "some.website.com".to_string();
     let port = "443".to_string();
     let jarm_hash = Jarm::new(host, port).hash().expect("failed to connect");
-    println!("JARM hash: {}", jarm_hash);
+    println!("JARM hash: {jarm_hash}");
 ````
 
 check [jarm.rs](examples/jarm.rs) for the full example, run it with `cargo run --example jarm`