diff --git a/.github/workflows/buddy-bot.yml b/.github/workflows/buddy-bot.yml
index 02468ae..0a7f6b0 100644
--- a/.github/workflows/buddy-bot.yml
+++ b/.github/workflows/buddy-bot.yml
@@ -130,7 +130,7 @@ jobs:
 
       - name: Setup PHP and Composer (if needed)
         if: ${{ hashFiles('composer.json') != '' }}
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@2.36.0
         with:
           php-version: '8.4'
           tools: composer
@@ -248,7 +248,7 @@ jobs:
 
       - name: Setup PHP and Composer (if needed)
         if: ${{ hashFiles('composer.json') != '' }}
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@2.36.0
         with:
           php-version: '8.4'
           tools: composer
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 15bf486..9f28e4c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,10 +18,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
 
       - name: Install Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.1.2
 
       - name: Use cached node_modules
         uses: actions/cache@v4
@@ -41,10 +41,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
 
       - name: Install Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.1.2
 
       - name: Use cached node_modules
         uses: actions/cache@v4
@@ -64,10 +64,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
 
       - name: Install Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.1.2
 
       - name: Use cached node_modules
         uses: actions/cache@v4
@@ -87,10 +87,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
 
       - name: Install Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.1.2
 
       - name: Use cached node_modules
         uses: actions/cache@v4
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3e3b57b..afb45cc 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
         with:
           fetch-depth: 0
 
@@ -40,7 +40,7 @@ jobs:
           GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
 
       - name: Attach Binaries
-        uses: stacksjs/action-releaser@v1.2.7
+        uses: stacksjs/action-releaser@v1.2.9
         with:
           files: |
             bin/gitit-linux-x64.zip
diff --git a/package.json b/package.json
index edbba80..c0c9023 100644
--- a/package.json
+++ b/package.json
@@ -71,7 +71,7 @@
     "typecheck": "bun --bun tsc --noEmit"
   },
   "dependencies": {
-    "nanotar": "^0.2.0"
+    "nanotar": "^0.3.0"
   },
   "devDependencies": {
     "@stacksjs/bumpx": "^0.2.4",
@@ -80,8 +80,8 @@
     "@stacksjs/eslint-config": "^4.14.0-beta.3",
     "@stacksjs/gitlint": "^0.1.5",
     "@stacksjs/logsmith": "^0.2.1",
-    "@types/bun": "^1.3.3",
-    "buddy-bot": "^0.9.12",
+    "@types/bun": "^1.3.9",
+    "buddy-bot": "^0.9.16",
     "bun-git-hooks": "^0.3.1",
     "bun-plugin-dtsx": "^0.21.17",
     "bunfig": "^0.15.6",