diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 684becf7e..69034745a 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -7,6 +7,8 @@ updates:
     include: "scope"
   schedule:
     interval: "monthly"
+  cooldown:
+    default-days: 7
 
 - package-ecosystem: composer
   directory: "/"
@@ -28,6 +30,8 @@ updates:
       applies-to: version-updates
       patterns:
         - "symfony/*"
+  cooldown:
+    default-days: 7
 
 - package-ecosystem: composer
   directory: "/"
@@ -53,6 +57,8 @@ updates:
       applies-to: version-updates
       patterns:
         - "symfony/*"
+  cooldown:
+    default-days: 7
 
 - package-ecosystem: composer
   directory: "/"
@@ -78,6 +84,8 @@ updates:
       applies-to: version-updates
       patterns:
         - "symfony/*"
+  cooldown:
+    default-days: 7
 
 - package-ecosystem: composer
   directory: "/"
@@ -103,3 +111,5 @@ updates:
       applies-to: version-updates
       patterns:
         - "symfony/*"
+  cooldown:
+    default-days: 7
diff --git a/.github/workflows/composer-auto.yml b/.github/workflows/composer-auto.yml
index 45ba1b23a..e07a4a0b4 100644
--- a/.github/workflows/composer-auto.yml
+++ b/.github/workflows/composer-auto.yml
@@ -72,7 +72,7 @@ jobs:
 
     steps:
       - name: Checkout ${{ needs.init.outputs.head_ref }}
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           persist-credentials: true
           token: ${{ secrets.COMMAND_BOT_PAT }}
@@ -85,7 +85,7 @@ jobs:
           git config --local user.name 'nextcloud-command'
 
       - name: Set up php
-        uses: shivammathur/setup-php@bf6b4fbd49ca58e4608c9c89fba0b8d90bd2a39f # v2.35.5
+        uses: shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1 # v2.36.0
         with:
           php-version: 8.1
           coverage: none
diff --git a/.github/workflows/composer.yml b/.github/workflows/composer.yml
index 17f8b2857..b53fa582e 100644
--- a/.github/workflows/composer.yml
+++ b/.github/workflows/composer.yml
@@ -17,14 +17,14 @@ jobs:
     name: Check vendor changes
     steps:
     - name: Checkout
-      uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       with:
         persist-credentials: false
 
     - name: Set up php
-      uses: shivammathur/setup-php@bf6b4fbd49ca58e4608c9c89fba0b8d90bd2a39f # v2.35.5
+      uses: shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1 # v2.36.0
       with:
-        php-version: 8.1
+        php-version: 8.2
         coverage: none
 
     - name: Enforce --no-dev
diff --git a/.github/workflows/lint-php.yml b/.github/workflows/lint-php.yml
index 368220d21..1f1693846 100644
--- a/.github/workflows/lint-php.yml
+++ b/.github/workflows/lint-php.yml
@@ -19,18 +19,18 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        php-versions: [ '8.1', '8.2', '8.3', '8.4' ]
+        php-versions: [ '8.2', '8.3', '8.4', '8.5' ]
 
     name: php-lint
 
     steps:
       - name: Checkout
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           persist-credentials: false
 
       - name: Set up php ${{ matrix.php-versions }}
-        uses: shivammathur/setup-php@bf6b4fbd49ca58e4608c9c89fba0b8d90bd2a39f #v2.35.5
+        uses: shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1 # v2.36.0
         with:
           php-version: ${{ matrix.php-versions }}
           extensions: bz2, ctype, curl, dom, fileinfo, gd, iconv, intl, json, libxml, mbstring, openssl, pcntl, posix, session, simplexml, xmlreader, xmlwriter, zip, zlib, sqlite, pdo_sqlite