diff --git a/.github/workflows/check-dist.yml b/.github/workflows/check-dist.yml
index 89c180e..c15bc65 100644
--- a/.github/workflows/check-dist.yml
+++ b/.github/workflows/check-dist.yml
@@ -25,7 +25,7 @@ jobs:
       - uses: actions/checkout@v7
 
       - name: Set Node.js 24.x
-        uses: actions/setup-node@v7.0.0
+        uses: actions/setup-node@v7.1.0
         with:
           node-version: 24.x
 
@@ -46,7 +46,7 @@ jobs:
         id: diff
 
       # If index.js was different than expected, upload the expected version as an artifact
-      - uses: actions/upload-artifact@v7.0.1
+      - uses: actions/upload-artifact@v7.0.2
         if: ${{ failure() && steps.diff.conclusion == 'failure' }}
         with:
           name: dist
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index f2a151d..67ddb9e 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -42,7 +42,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4.37.7
+        uses: github/codeql-action/init@v4.39.0
         with:
           languages: ${{ matrix.language }}
           source-root: src
@@ -54,7 +54,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v4.37.7
+        uses: github/codeql-action/autobuild@v4.39.0
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -68,4 +68,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v4.37.7
+        uses: github/codeql-action/analyze@v4.39.0
diff --git a/package-lock.json b/package-lock.json
index 4122825..ce23f1a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -17,7 +17,7 @@
       "devDependencies": {
         "@eslint/compat": "^2.0.3",
         "@eslint/eslintrc": "^3.3.1",
-        "@eslint/js": "^9.0.0",
+        "@eslint/js": "9.39.5",
         "@rollup/plugin-commonjs": "^29.0.0",
         "@rollup/plugin-node-resolve": "^16.0.1",
         "@rollup/plugin-typescript": "^12.1.4",
@@ -26,7 +26,7 @@
         "@typescript-eslint/eslint-plugin": "^8.40.0",
         "@typescript-eslint/parser": "^8.40.0",
         "@vercel/ncc": "^0.45.0",
-        "eslint": "^9.0.0",
+        "eslint": "9.39.5",
         "eslint-plugin-github": "^6.0.0",
         "eslint-plugin-import": "^2.32.0",
         "eslint-plugin-jest": "^29.0.0",
@@ -39,7 +39,7 @@
         "rollup": "^4.48.1",
         "ts-jest": "^29.4.1",
         "ts-jest-resolver": "^2.0.1",
-        "typescript": "~6.0.0"
+        "typescript": "6.0.3"
       },
       "engines": {
         "node": ">=24.0.0"
diff --git a/package.json b/package.json
index 433eb15..804a068 100644
--- a/package.json
+++ b/package.json
@@ -42,7 +42,7 @@
   "devDependencies": {
     "@eslint/compat": "^2.0.3",
     "@eslint/eslintrc": "^3.3.1",
-    "@eslint/js": "^9.0.0",
+    "@eslint/js": "9.39.5",
     "@rollup/plugin-commonjs": "^29.0.0",
     "@rollup/plugin-node-resolve": "^16.0.1",
     "@rollup/plugin-typescript": "^12.1.4",
@@ -51,7 +51,7 @@
     "@typescript-eslint/eslint-plugin": "^8.40.0",
     "@typescript-eslint/parser": "^8.40.0",
     "@vercel/ncc": "^0.45.0",
-    "eslint": "^9.0.0",
+    "eslint": "9.39.5",
     "eslint-plugin-github": "^6.0.0",
     "eslint-plugin-import": "^2.32.0",
     "eslint-plugin-jest": "^29.0.0",
@@ -64,6 +64,6 @@
     "rollup": "^4.48.1",
     "ts-jest": "^29.4.1",
     "ts-jest-resolver": "^2.0.1",
-    "typescript": "~6.0.0"
+    "typescript": "6.0.3"
   }
 }
diff --git a/renovate.json b/renovate.json
index 812d715..ebc6ab6 100644
--- a/renovate.json
+++ b/renovate.json
@@ -5,5 +5,15 @@
   "schedule": ["* * * * 0,6"],
   "vulnerabilityAlerts": {
     "enabled": true
-  }
+  },
+  "packageRules": [
+    {
+      "matchPackageNames": ["eslint", "@eslint/js"],
+      "allowedVersions": "<10"
+    },
+    {
+      "matchPackageNames": ["typescript"],
+      "allowedVersions": "<7"
+    }
+  ]
 }