diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 275a035..e1fbfa7 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -25,7 +25,7 @@ jobs:
           global-json-file: global.json
           cache: true
           cache-dependency-path: "**/packages.lock.json"
-      - uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
+      - uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
         with:
           languages: csharp
           build-mode: manual
@@ -33,7 +33,7 @@ jobs:
       - run: >-
           dotnet build src/Snaply.App/Snaply.App.csproj
           -c Release -p:Platform=x64 --no-restore
-      - uses: github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
+      - uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
         with:
           category: /language:csharp
 
@@ -45,10 +45,10 @@ jobs:
       security-events: write
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
+      - uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
         with:
           languages: actions
           build-mode: none
-      - uses: github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
+      - uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
         with:
           category: /language:actions
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index bab1894..d322806 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -106,7 +106,7 @@ jobs:
             -nsb https://github.com/P4suta/Snaply `
             -mi SPDX:2.2 `
             -cd '--DirectoryExclusionList **/artifacts/** --DirectoryExclusionList **/build/**'
-      - uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2.87.29
+      - uses: taiki-e/install-action@a4d3f3f761dcd95cce1b72cb61cb6d1963438177 # v2.87.30
         with:
           tool: osv-scanner@2.3.6
       - name: Scan release SBOM
diff --git a/.github/workflows/sbom-monitor.yml b/.github/workflows/sbom-monitor.yml
index 5c5203c..503a022 100644
--- a/.github/workflows/sbom-monitor.yml
+++ b/.github/workflows/sbom-monitor.yml
@@ -29,7 +29,7 @@ jobs:
           gh release download "$tag" --pattern 'snaply.spdx.json' --dir sbom
           echo "available=true" >> "$GITHUB_OUTPUT"
           echo "tag=$tag" >> "$GITHUB_OUTPUT"
-      - uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2.87.29
+      - uses: taiki-e/install-action@a4d3f3f761dcd95cce1b72cb61cb6d1963438177 # v2.87.30
         if: steps.release.outputs.available == 'true'
         with:
           tool: osv-scanner@2.3.6
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index b211909..c21fab5 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -27,6 +27,6 @@ jobs:
           results_file: results.sarif
           results_format: sarif
           publish_results: true
-      - uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
+      - uses: github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
         with:
           sarif_file: results.sarif
diff --git a/tests/Snaply.Tests/Snaply.Tests.csproj b/tests/Snaply.Tests/Snaply.Tests.csproj
index 5eacc23..2cea680 100644
--- a/tests/Snaply.Tests/Snaply.Tests.csproj
+++ b/tests/Snaply.Tests/Snaply.Tests.csproj
@@ -14,7 +14,7 @@
     <PackageReference Include="Microsoft.Testing.Extensions.TrxReport" Version="2.5.1" />
     <PackageReference Include="xunit.v3" Version="4.0.2" />
     <PackageReference Include="xunit.runner.visualstudio" Version="4.0.1" />
-    <PackageReference Include="FsCheck.Xunit.v3" Version="3.5.0" />
+    <PackageReference Include="FsCheck.Xunit.v3" Version="3.6.0" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/tests/Snaply.Tests/packages.lock.json b/tests/Snaply.Tests/packages.lock.json
index e0f159c..a55b537 100644
--- a/tests/Snaply.Tests/packages.lock.json
+++ b/tests/Snaply.Tests/packages.lock.json
@@ -16,12 +16,12 @@
       },
       "FsCheck.Xunit.v3": {
         "type": "Direct",
-        "requested": "[3.5.0, )",
-        "resolved": "3.5.0",
-        "contentHash": "JJc9DpasHHEdx5OpYK7r27PEKvw6vlWi7XLELIb1lqbGcR2dTwgCaI8wa7z63AJQZK9GBbshkSs0dgvsRgdj2w==",
+        "requested": "[3.6.0, )",
+        "resolved": "3.6.0",
+        "contentHash": "rIR16Wi63jv4e5tOGkyyCZ9nMyhZc2CRuWLxIdFrBJ22zuvJ6zzAL/F1b2157J1lV6WGdBjOlGeMDryw4ECBSg==",
         "dependencies": {
           "FSharp.Core": "5.0.2",
-          "FsCheck": "[3.5.0]",
+          "FsCheck": "[3.6.0]",
           "xunit.v3.extensibility.core": "[4.0.0, 5.0.0)"
         }
       },
@@ -62,8 +62,8 @@
       },
       "FsCheck": {
         "type": "Transitive",
-        "resolved": "3.5.0",
-        "contentHash": "olekPbZ9M09t1qRK6yXfzvyA/eiLFXK2obJ0BAkk7reEoohbO/6ac8ISbCD3murRnQbwT04TUZKT3boFDUe4kw==",
+        "resolved": "3.6.0",
+        "contentHash": "XjZ5sWf/QKLqB9aMKG7FvrT/8Ak2fPo0ygRstindBWZWU8P3EcmvYJ5UkX0daIL4+bZeaiD9ThkftGlIx3ZewQ==",
         "dependencies": {
           "FSharp.Core": "5.0.2"
         }