diff --git a/.github/workflows/buddy-bot.yml b/.github/workflows/buddy-bot.yml
index 413cab6d..b903e79f 100644
--- a/.github/workflows/buddy-bot.yml
+++ b/.github/workflows/buddy-bot.yml
@@ -126,11 +126,11 @@ jobs:
           persist-credentials: true
 
       - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.0.2
 
       - name: Setup PHP and Composer (if needed)
         if: ${{ hashFiles('composer.json') != '' }}
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@2.35.3
         with:
           php-version: '8.4'
           tools: composer
@@ -163,7 +163,7 @@ jobs:
           persist-credentials: true
 
       - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.0.2
 
       - name: Install dependencies
         run: bun install
@@ -241,11 +241,11 @@ jobs:
           persist-credentials: true
 
       - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.0.2
 
       - name: Setup PHP and Composer (if needed)
         if: ${{ hashFiles('composer.json') != '' }}
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@2.35.3
         with:
           php-version: '8.4'
           tools: composer
@@ -348,7 +348,7 @@ jobs:
           token: ${{ secrets.BUDDY_BOT_TOKEN || secrets.GITHUB_TOKEN }}
 
       - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.0.2
 
       - name: Install dependencies
         run: bun install
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ed8e8d84..1cef1b33 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -25,7 +25,7 @@ jobs:
         uses: oven-sh/setup-bun@v2
 
       - name: Use Cached node_modules
-        uses: actions/cache@v4
+        uses: actions/cache@v4.2.4
         with:
           path: node_modules
           key: node-modules-${{ hashFiles('**/bun.lock') }}
diff --git a/composer.json b/composer.json
index a2ba9a4b..8a36980b 100644
--- a/composer.json
+++ b/composer.json
@@ -11,18 +11,18 @@
   ],
   "require": {
     "php": "^8.1",
-    "laravel/framework": "^10.0",
+    "laravel/framework": "^v10.0.3",
     "guzzlehttp/guzzle": "^7.0",
-    "symfony/console": "^6.0",
+    "symfony/console": "^v6.0.19",
     "monolog/monolog": "^3.0",
-    "doctrine/dbal": "^3.0"
+    "doctrine/dbal": "^3.10.1"
   },
   "require-dev": {
-    "phpunit/phpunit": "^10.0",
+    "phpunit/phpunit": "^10.0.19",
     "mockery/mockery": "^1.5",
     "fakerphp/faker": "^1.20",
     "laravel/pint": "^1.0",
-    "nunomaduro/collision": "^7.0"
+    "nunomaduro/collision": "^v7.0.5"
   },
   "autoload": {
     "psr-4": {
diff --git a/deps.yaml b/deps.yaml
index f21568fa..4655bab3 100644
--- a/deps.yaml
+++ b/deps.yaml
@@ -1,2 +1,2 @@
 dependencies:
-  bun.sh: ^1.2.16
+  bun.sh: ^1.2.20
diff --git a/package.json b/package.json
index ec4200f8..c5666d9c 100644
--- a/package.json
+++ b/package.json
@@ -55,7 +55,7 @@
     "bunfig": "^0.10.1",
     "cac": "6.7.14",
     "prompts": "^2.4.2",
-    "ts-pkgx": "0.4.38"
+    "ts-pkgx": "0.4.42"
   },
   "devDependencies": {
     "@stacksjs/docs": "^0.70.23",