diff --git a/.github/workflows/auto-changelog.yml b/.github/workflows/auto-changelog.yml
index da99c075..4e580c6c 100644
--- a/.github/workflows/auto-changelog.yml
+++ b/.github/workflows/auto-changelog.yml
@@ -21,6 +21,6 @@ jobs:
         with:
           ref: ${{ github.event.workflow_run.head_sha || github.sha }}
       - name: Draft Release
-        uses: release-drafter/release-drafter@6db134d15f3909ccc9eefd369f02bd1e9cffdf97 # v6
+        uses: release-drafter/release-drafter@00ce30b0ce8a4d67bccfca59421cdf6c55dd0784 # v6
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/security-pr.yml b/.github/workflows/security-pr.yml
index 06a87ed8..6a9ff2eb 100644
--- a/.github/workflows/security-pr.yml
+++ b/.github/workflows/security-pr.yml
@@ -385,7 +385,7 @@ jobs:
       - name: Upload Trivy SARIF to GitHub Security
         if: always() && steps.trivy-sarif-check.outputs.exists == 'true'
         # github/codeql-action v4
-        uses: github/codeql-action/upload-sarif@72d2d850d1f91d4e1e024f4cf4276fd16bb68462
+        uses: github/codeql-action/upload-sarif@d1a65275e8dac7b2cc72bb121bf58f0ee7b0f92d
         with:
           sarif_file: 'trivy-binary-results.sarif'
           category: ${{ steps.pr-info.outputs.is_push == 'true' && format('security-scan-{0}', github.event_name == 'workflow_run' && github.event.workflow_run.head_branch || github.ref_name) || format('security-scan-pr-{0}', steps.pr-info.outputs.pr_number) }}
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 2b7ba5b5..cd9a59f7 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -26,10 +26,10 @@
         "react-dom": "^19.2.4",
         "react-hook-form": "^7.71.2",
         "react-hot-toast": "^2.6.0",
-        "react-i18next": "^16.5.5",
+        "react-i18next": "^16.5.6",
         "react-router-dom": "^7.13.1",
         "tailwind-merge": "^3.5.0",
-        "tldts": "^7.0.24"
+        "tldts": "^7.0.25"
       },
       "devDependencies": {
         "@eslint/css": "^0.14.1",
diff --git a/frontend/package.json b/frontend/package.json
index 4916b27e..2b27ce72 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -45,10 +45,10 @@
     "react-dom": "^19.2.4",
     "react-hook-form": "^7.71.2",
     "react-hot-toast": "^2.6.0",
-    "react-i18next": "^16.5.5",
+    "react-i18next": "^16.5.6",
     "react-router-dom": "^7.13.1",
     "tailwind-merge": "^3.5.0",
-    "tldts": "^7.0.24"
+    "tldts": "^7.0.25"
   },
   "devDependencies": {
     "@eslint/css": "^0.14.1",
diff --git a/package-lock.json b/package-lock.json
index d870b5ed..f00c32c0 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -6,7 +6,7 @@
     "": {
       "dependencies": {
         "@typescript/analyze-trace": "^0.10.1",
-        "tldts": "^7.0.24",
+        "tldts": "^7.0.25",
         "type-check": "^0.4.0",
         "typescript": "^5.9.3",
         "vite": "^7.3.1"
diff --git a/package.json b/package.json
index 3118344a..8962c837 100644
--- a/package.json
+++ b/package.json
@@ -11,7 +11,7 @@
   },
   "dependencies": {
     "@typescript/analyze-trace": "^0.10.1",
-    "tldts": "^7.0.24",
+    "tldts": "^7.0.25",
     "type-check": "^0.4.0",
     "typescript": "^5.9.3",
     "vite": "^7.3.1"