diff --git a/.github/workflows/php-checks.yml b/.github/workflows/php-checks.yml
index b903d6c..45bf3c3 100644
--- a/.github/workflows/php-checks.yml
+++ b/.github/workflows/php-checks.yml
@@ -10,10 +10,10 @@ jobs:
     name: PHP ${{ matrix.php-versions }} tests
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
 
       - name: Setup PHP
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1 # v2
         with:
           php-version: ${{ matrix.php-versions }}
           tools: cs2pr
@@ -23,7 +23,7 @@ jobs:
         run: echo "dir=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT
 
       - name: Cache dependencies
-        uses: actions/cache@v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
           path: ${{ steps.composer-cache.outputs.dir }}
           key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
diff --git a/composer.json b/composer.json
index 918c11b..c619739 100644
--- a/composer.json
+++ b/composer.json
@@ -38,9 +38,9 @@
     "php": "8.2 - 8.5"
   },
   "require-dev": {
-    "phpstan/phpstan": "2.1.32",
+    "phpstan/phpstan": "2.1.33",
     "phpunit/phpunit": "11.5.44",
     "squizlabs/php_codesniffer": "4.0.1",
-    "friendsofphp/php-cs-fixer": "^3.65"
+    "friendsofphp/php-cs-fixer": "3.92.0"
   }
 }