diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index da92833..beb8f36 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -18,20 +18,20 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 # https://github.com/actions/checkout
 
       - name: Validate composer.json and composer.lock
         run: composer validate
 
       - name: Cache dependencies
-        uses: actions/cache@v4.0.1
+        uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 # https://github.com/actions/cache
         with:
           path: vendor
           key: ${{ runner.os }}-composer-dependencies-${{ hashFiles('composer.lock') }}
           restore-keys: ${{ runner.os }}-composer-dependencies
 
       - name: Setup PHP
-        uses: shivammathur/setup-php@2.30.0
+        uses: shivammathur/setup-php@bf6b4fbd49ca58e4608c9c89fba0b8d90bd2a39f # 2.35.5 # https://github.com/shivammathur/setup-php
         with:
           php-version: 8.3
           extensions: dom, curl, libxml, mbstring, zip, pcntl, intl
diff --git a/.gitignore b/.gitignore
index 7224874..93c920b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,3 +4,4 @@
 
 composer.lock
 .env
+.php-cs-fixer.cache
diff --git a/composer.json b/composer.json
index 01939d5..06531e5 100644
--- a/composer.json
+++ b/composer.json
@@ -5,11 +5,11 @@
   "type": "library",
   "require": {
     "php": "^8.3",
-    "symfony/process": "v7.2.0"
+    "symfony/process": "^7.3"
   },
   "require-dev": {
-    "blumilksoftware/codestyle": "^v3.0.0",
-    "phpunit/phpunit": "^11.0.9"
+    "blumilksoftware/codestyle": "^5.1",
+    "phpunit/phpunit": "^11.5"
   },
   "authors": [
     {