diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 247555fbb..3601a884d 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -16,17 +16,17 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        php: [ 8.2, 8.3, 8.4, 8.5 ]
+        php: [ '8.2', '8.3', '8.4', '8.5', '8.6' ]
         include:
-          - php: 8.4
+          - php: '8.4'
             analysis: true
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up PHP ${{ matrix.php }}
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # v2.40.0
         with:
           php-version: ${{ matrix.php }}
           coverage: xdebug
@@ -50,8 +50,7 @@ jobs:
 
       - name: Upload coverage results to Coveralls
         if: matrix.analysis
-        env:
-          COVERALLS_REPO_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          composer global require php-coveralls/php-coveralls
-          php-coveralls --coverage_clover=build/coverage/clover.xml -v
+        uses: coverallsapp/github-action@8d6379e14d29928660c4ba802d8e85393440b329 # v2.3.8
+        with:
+          flag-name: php-${{ matrix.php }}
+          files: build/coverage/clover.xml
diff --git a/composer.json b/composer.json
index d6b8ed82b..6b2e4ceea 100644
--- a/composer.json
+++ b/composer.json
@@ -52,7 +52,7 @@
         "slack": "https://slimphp.slack.com/"
     },
     "require": {
-        "php": "~8.2.0 || ~8.3.0 || ~8.4.0 || ~8.5.0",
+        "php": "~8.2.0 || ~8.3.0 || ~8.4.0 || ~8.5.0 || ~8.6.0",
         "ext-json": "*",
         "nikic/fast-route": "^1.3",
         "psr/container": "^2.0",