diff --git a/.brazil.json b/.brazil.json
index 987379aec..a347a892a 100644
--- a/.brazil.json
+++ b/.brazil.json
@@ -25,7 +25,7 @@
     "software.amazon.smithy:smithy-waiters:1.*": "Maven-software-amazon-smithy_smithy-waiters-1.x",
     "software.amazon.smithy:smithy-rules-engine:1.*": "Maven-software-amazon-smithy_smithy-rules-engine-1.x",
     "software.amazon.smithy:smithy-smoke-test-traits:1.*": "Maven-software-amazon-smithy_smithy-smoke-test-traits-1.x",
-    "org.jsoup:jsoup:1.19.*": "Maven-jsoup-1.19.x"
+    "org.jsoup:jsoup:1.*": "Maven-jsoup-1.x"
   },
   "packageHandlingRules": {
     "versioning": {
diff --git a/.github/workflows/artifact-size-metrics.yml b/.github/workflows/artifact-size-metrics.yml
index ba636cc4c..dce41ed80 100644
--- a/.github/workflows/artifact-size-metrics.yml
+++ b/.github/workflows/artifact-size-metrics.yml
@@ -1,6 +1,6 @@
 name: Artifact Size Metrics
 on:
-  pull_request_target:
+  pull_request:
     types: [ opened, synchronize, reopened, labeled, unlabeled ]
     branches:
       - main
@@ -40,7 +40,6 @@ jobs:
       - name: Put Artifact Size Metrics in CloudWatch
         run: ./gradlew putArtifactSizeMetricsInCloudWatch -Prelease=${{ github.event.release.tag_name }}
   size-check:
-    if: github.event_name == 'pull_request_target'
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Sources
diff --git a/.github/workflows/changelog-verification.yml b/.github/workflows/changelog-verification.yml
index 995c03843..5b1f51331 100644
--- a/.github/workflows/changelog-verification.yml
+++ b/.github/workflows/changelog-verification.yml
@@ -4,7 +4,7 @@ permissions:
   id-token: write
 
 on:
-  pull_request_target:
+  pull_request:
     types: [ opened, synchronize, reopened, labeled, unlabeled ]
     branches:
       - main
diff --git a/.github/workflows/kat-transform.yml b/.github/workflows/kat-transform.yml
index efef4d546..bcf6c933c 100644
--- a/.github/workflows/kat-transform.yml
+++ b/.github/workflows/kat-transform.yml
@@ -1,7 +1,7 @@
 name: Kat Transform
 
 on:
-  pull_request_target:
+  pull_request:
     types: [ opened, synchronize, reopened, labeled, unlabeled ]
     branches:
       - main
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index de1931fda..482c35ed1 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -26,7 +26,7 @@ kotest-version = "5.9.1"
 kotlin-compile-testing-version = "0.8.0"
 kotlinx-benchmark-version = "0.4.14"
 kotlinx-serialization-version = "1.9.0"
-docker-java-version = "3.4.0"
+docker-java-version = "3.5.3"
 ktor-version = "3.2.3"
 kaml-version = "0.55.0"
 jsoup-version = "1.21.1"