diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b134c1d..cf6a8c1 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,10 +18,10 @@ jobs:
       id-token: write
     steps:
       - name: Checkout source
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Setup node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: 22
           registry-url: 'https://registry.npmjs.org'
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 6e42ced..edf95c7 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -10,9 +10,9 @@ jobs:
     name: npm run test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: 22
           cache: npm
diff --git a/package-lock.json b/package-lock.json
index de0a3bf..019c839 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,23 +1,23 @@
 {
   "name": "@mrtc0/csp-html-webpack-plugin",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@mrtc0/csp-html-webpack-plugin",
-      "version": "1.0.2",
+      "version": "1.0.3",
       "license": "Apache-2.0",
       "devDependencies": {
-        "@changesets/cli": "^2.26.2",
-        "@types/jest": "^29.5.3",
-        "@types/jsdom": "^21.1.1",
-        "html-webpack-plugin": "^5.5.3",
-        "jest": "^29.6.1",
-        "jsdom": "^24.0.0",
-        "ts-jest": "^29.1.1",
-        "typescript": "^5.1.6",
-        "webpack": "^5.88.1"
+        "@changesets/cli": "2.27.12",
+        "@types/jest": "29.5.14",
+        "@types/jsdom": "21.1.7",
+        "html-webpack-plugin": "5.6.3",
+        "jest": "29.7.0",
+        "jsdom": "24.1.3",
+        "ts-jest": "29.2.5",
+        "typescript": "5.7.3",
+        "webpack": "5.97.1"
       }
     },
     "node_modules/@ampproject/remapping": {
@@ -905,6 +905,7 @@
         }
       ],
       "license": "MIT",
+      "peer": true,
       "engines": {
         "node": ">=18"
       },
@@ -928,6 +929,7 @@
         }
       ],
       "license": "MIT",
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
@@ -1835,6 +1837,7 @@
       "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "fast-deep-equal": "^3.1.1",
         "fast-json-stable-stringify": "^2.0.0",
@@ -2195,6 +2198,7 @@
         }
       ],
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "caniuse-lite": "^1.0.30001688",
         "electron-to-chromium": "^1.5.73",
@@ -3809,6 +3813,7 @@
       "integrity": "sha512-NIy3oAFp9shda19hy4HK0HRTWKtPJmGdnvywu01nOqNC2vZg+Z+fvJDxpMQA88eb2I9EcafcdjYgsDthnYTvGw==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "@jest/core": "^29.7.0",
         "@jest/types": "^29.6.3",
@@ -5832,6 +5837,7 @@
       "integrity": "sha512-B/gBuNg5SiMTrPkC+A2+cW0RszwxYmn6VYxB/inlBStS5nx6xHIt/ehKRhIMhqusl7a8LjQoZnjCs5vhwxOQ1g==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "fast-deep-equal": "^3.1.3",
         "fast-uri": "^3.0.1",
@@ -6104,6 +6110,7 @@
       "integrity": "sha512-84MVSjMEHP+FQRPy3pX9sTVV/INIex71s9TL2Gm5FG/WG1SqXeKyZ0k7/blY/4FdOzI12CBy1vGc4og/eus0fw==",
       "dev": true,
       "license": "Apache-2.0",
+      "peer": true,
       "bin": {
         "tsc": "bin/tsc",
         "tsserver": "bin/tsserver"
@@ -6249,6 +6256,7 @@
       "integrity": "sha512-EksG6gFY3L1eFMROS/7Wzgrii5mBAFe4rIr3r2BTfo7bcc+DWwFZ4OJ/miOuHJO/A85HwyI4eQ0F6IKXesO7Fg==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "@types/eslint-scope": "^3.7.7",
         "@types/estree": "^1.0.6",
diff --git a/package.json b/package.json
index 889c2a1..314eba0 100644
--- a/package.json
+++ b/package.json
@@ -25,15 +25,15 @@
   "author": "mrtc0@ssrf.in",
   "license": "Apache-2.0",
   "devDependencies": {
-    "@changesets/cli": "^2.26.2",
-    "@types/jest": "^29.5.3",
-    "@types/jsdom": "^21.1.1",
-    "html-webpack-plugin": "^5.5.3",
-    "jest": "^29.6.1",
-    "jsdom": "^24.0.0",
-    "ts-jest": "^29.1.1",
-    "typescript": "^5.1.6",
-    "webpack": "^5.88.1"
+    "@changesets/cli": "2.27.12",
+    "@types/jest": "29.5.14",
+    "@types/jsdom": "21.1.7",
+    "html-webpack-plugin": "5.6.3",
+    "jest": "29.7.0",
+    "jsdom": "24.1.3",
+    "ts-jest": "29.2.5",
+    "typescript": "5.7.3",
+    "webpack": "5.97.1"
   },
   "publishConfig": {
     "access": "public",