diff --git a/.github/workflows/pypi-release.yml b/.github/workflows/pypi-release.yml
index df2aba5..2bab499 100644
--- a/.github/workflows/pypi-release.yml
+++ b/.github/workflows/pypi-release.yml
@@ -11,7 +11,7 @@ jobs:
       contents: read
       id-token: write
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
         with:
           python-version: "3.x"
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index dd2a794..e552b37 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -14,7 +14,7 @@ jobs:
         python-version: ['3.10', '3.11', '3.12', '3.13', '3.14']
     steps:
       - name: "Checkout repo"
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       - name: Set up Python 3
         uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
         with:
diff --git a/pyproject.toml b/pyproject.toml
index 2e6622b..20dbf2a 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -30,7 +30,7 @@ packages = [
 [tool.poetry.dependencies]
 python = ">=3.9,<4.0"
 textX = ">=4.3,<4.4"
-importlib-metadata = ">=8.7.1,<8.8.0"
+importlib-metadata = ">=8.9.0,<8.10.0"
 setuptools = ">=65.0.0,<81.0.0"
 
 [tool.poetry.scripts]
diff --git a/requirements.txt b/requirements.txt
index c464b2a..e24354a 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,5 +1,5 @@
 arpeggio==2.0.3
-importlib-metadata==8.7.1; python_version >= "3.7"
+importlib-metadata==8.9.0; python_version >= "3.7"
 textx==4.3.0
 typing-extensions==4.15.0; python_version < "3.8" and python_version >= "3.7"
-zipp==3.23.0; python_version >= "3.7"
+zipp==3.23.1; python_version >= "3.7"