diff --git a/.github/workflows/buddy-bot.yml b/.github/workflows/buddy-bot.yml
index 4ed077f..acbf3ad 100644
--- a/.github/workflows/buddy-bot.yml
+++ b/.github/workflows/buddy-bot.yml
@@ -130,7 +130,7 @@ jobs:
 
       - name: Setup PHP and Composer (if needed)
         if: ${{ hashFiles('composer.json') != '' }}
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@2.35.5
         with:
           php-version: '8.4'
           tools: composer
@@ -248,7 +248,7 @@ jobs:
 
       - name: Setup PHP and Composer (if needed)
         if: ${{ hashFiles('composer.json') != '' }}
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@2.35.5
         with:
           php-version: '8.4'
           tools: composer
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index faea563..6d2d08a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -21,10 +21,10 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Install Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.0.2
 
       - name: Use cached node_modules
-        uses: actions/cache@v4
+        uses: actions/cache@v4.3.0
         with:
           path: node_modules
           key: node-modules-${{ hashFiles('**/bun.lock') }}
@@ -44,10 +44,10 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Install Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.0.2
 
       - name: Use cached node_modules
-        uses: actions/cache@v4
+        uses: actions/cache@v4.3.0
         with:
           path: node_modules
           key: node-modules-${{ hashFiles('**/bun.lock') }}
@@ -67,10 +67,10 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Install Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.0.2
 
       - name: Use cached node_modules
-        uses: actions/cache@v4
+        uses: actions/cache@v4.3.0
         with:
           path: node_modules
           key: node-modules-${{ hashFiles('**/bun.lock') }}
@@ -90,10 +90,10 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Install Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.0.2
 
       - name: Use cached node_modules
-        uses: actions/cache@v4
+        uses: actions/cache@v4.3.0
         with:
           path: node_modules
           key: node-modules-${{ hashFiles('**/bun.lock') }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a6f5aaa..e8589c3 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -16,10 +16,10 @@ jobs:
           fetch-depth: 0
 
       - name: Install Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.0.2
 
       - name: Use cached node_modules
-        uses: actions/cache@v4
+        uses: actions/cache@v4.3.0
         with:
           path: node_modules
           key: node-modules-${{ hashFiles('**/bun.lock') }}
diff --git a/package.json b/package.json
index 1e348bb..7942f1b 100644
--- a/package.json
+++ b/package.json
@@ -51,10 +51,10 @@
     "fullstack": "bun run examples/fullstack-server.ts"
   },
   "peerDependencies": {
-    "@babel/core": "^7.27.1",
-    "@babel/preset-react": "^7.27.1",
+    "@babel/core": "^7.28.5",
+    "@babel/preset-react": "^7.28.5",
     "@vue/component-compiler-utils": "^3.3.0",
-    "react": "^19.1.0",
+    "react": "^19.2.0",
     "vue-template-compiler": "^2.7.16"
   },
   "peerDependenciesMeta": {
@@ -79,18 +79,18 @@
     "markdown-it": "^14.1.0"
   },
   "devDependencies": {
-    "@stacksjs/bumpx": "^0.1.13",
+    "@stacksjs/bumpx": "^0.1.17",
     "@stacksjs/eslint-config": "^4.10.2-beta.3",
     "@stacksjs/gitlint": "^0.1.5",
     "@stacksjs/logsmith": "^0.1.8",
-    "@types/bun": "^1.2.13",
+    "@types/bun": "^1.3.1",
     "@types/markdown-it": "^14.1.2",
-    "@types/react": "^19.1.4",
-    "buddy-bot": "^0.8.8",
+    "@types/react": "^19.2.2",
+    "buddy-bot": "^0.8.9",
     "bun-git-hooks": "^0.2.19",
     "bun-plugin-dtsx": "^0.21.12",
     "bunfig": "^0.10.0",
-    "typescript": "^5.8.3"
+    "typescript": "^5.9.3"
   },
   "overrides": {
     "unconfig": "0.3.10"
@@ -98,9 +98,9 @@
   "git-hooks": {
     "pre-commit": {
       "staged-lint": {
-        "*.{js,ts,json,yaml,yml,md}": "bun lint:fix"
+        "*.{js,ts,json,yaml,yml,md}": "bunx --bun eslint --fix"
       }
     },
-    "commit-msg": "bunx gitlint --edit $1"
+    "commit-msg": "bunx gitlint --edit .git/COMMIT_EDITMSG"
   }
 }
diff --git a/pkgx.yaml b/pkgx.yaml
index 59fe0af..4655bab 100644
--- a/pkgx.yaml
+++ b/pkgx.yaml
@@ -1,2 +1,2 @@
 dependencies:
-  bun.sh: ^1.2.8
+  bun.sh: ^1.2.20