diff --git a/.github/workflows/_release-worker.yaml b/.github/workflows/_release-worker.yaml
index 2cd874a1..6da013be 100644
--- a/.github/workflows/_release-worker.yaml
+++ b/.github/workflows/_release-worker.yaml
@@ -81,7 +81,7 @@ jobs:
     steps:
       - id: checkout
         name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           fetch-depth: 0
 
@@ -188,7 +188,7 @@ jobs:
       - id: deploy-docs
         if: ${{ (inputs.job == 'ci-release' || inputs.job == 'publish-release' || startsWith(inputs.job, 'force-')) && inputs.enable_build_docs && github.ref == 'refs/heads/main' }}
         name: Deploy docs
-        uses: JamesIves/github-pages-deploy-action@d92aa235d04922e8f08b40ce78cc5442fcfbfa2f # v4
+        uses: JamesIves/github-pages-deploy-action@fa24774553152dd7873cd16ebd8d959b010c5445 # v4
         with:
           folder: docs/build
 
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index f9210e15..47eda53d 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -169,7 +169,7 @@ jobs:
 
       - id: checkout
         name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: true
           token: ${{ secrets.GITHUB_TOKEN }}
@@ -242,7 +242,7 @@ jobs:
       - id: qa-coveralls
         if: ${{ steps.profile.outputs.enable_qa == 'true' }}
         name: QA Coveralls
-        uses: coverallsapp/github-action@5cbfd81b66ca5d10c19b062c04de0199c215fb6e # v2
+        uses: coverallsapp/github-action@8d6379e14d29928660c4ba802d8e85393440b329 # v2
       - id: qa-sonarqube
         if: ${{ steps.profile.outputs.enable_qa == 'true' }}
         name: QA SonarQube
diff --git a/.github/workflows/maintenance.yaml b/.github/workflows/maintenance.yaml
index 4979e8ed..de2e16a1 100644
--- a/.github/workflows/maintenance.yaml
+++ b/.github/workflows/maintenance.yaml
@@ -45,7 +45,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - name: Setup Environment
         uses: ./.github/actions/setup-environment
       - name: Run script
diff --git a/devbox.json b/devbox.json
index 997dd321..6ab1744f 100644
--- a/devbox.json
+++ b/devbox.json
@@ -4,10 +4,10 @@
     "actionlint@1.7.12",
     "antlr@4.13.2",
     "gettext@1.0",
-    "gh@2.96.0",
+    "gh@2.98.0",
     "gojq@0.12.19",
     "nodejs@24.12.0",
-    "openspec@1.4.1",
+    "openspec@1.10.0",
     "yq-go@4.53.3"
   ],
   "env": {
diff --git a/devbox.lock b/devbox.lock
index 6a7e890c..488e08c3 100644
--- a/devbox.lock
+++ b/devbox.lock
@@ -197,51 +197,41 @@
         }
       }
     },
-    "gh@2.96.0": {
-      "last_modified": "2026-07-23T05:10:05Z",
-      "resolved": "github:NixOS/nixpkgs/7525d999cd850b9a488817abc89c75dc733acf17#gh",
+    "gh@2.98.0": {
+      "last_modified": "2026-08-27T07:16:00Z",
+      "resolved": "github:NixOS/nixpkgs/c27cdad491a991b11ed731760aa2ef8db0cb0410#gh",
       "source": "devbox-search",
-      "version": "2.96.0",
+      "version": "2.98.0",
       "systems": {
         "aarch64-darwin": {
           "outputs": [
             {
               "name": "out",
-              "path": "/nix/store/fc59sg6h20yvm9hh589zawj0n4xvjkyv-gh-2.96.0",
+              "path": "/nix/store/y81ibbw74n6mskwsh54hnvwblkw33yzb-gh-2.98.0",
               "default": true
             }
           ],
-          "store_path": "/nix/store/fc59sg6h20yvm9hh589zawj0n4xvjkyv-gh-2.96.0"
+          "store_path": "/nix/store/y81ibbw74n6mskwsh54hnvwblkw33yzb-gh-2.98.0"
         },
         "aarch64-linux": {
           "outputs": [
             {
               "name": "out",
-              "path": "/nix/store/hhli6yr6kkcqb24v5rjw4wdi3dabbp2s-gh-2.96.0",
-              "default": true
-            }
-          ],
-          "store_path": "/nix/store/hhli6yr6kkcqb24v5rjw4wdi3dabbp2s-gh-2.96.0"
-        },
-        "x86_64-darwin": {
-          "outputs": [
-            {
-              "name": "out",
-              "path": "/nix/store/waa7fl1d466lkihg89p60iisjwynyfb7-gh-2.96.0",
+              "path": "/nix/store/j5mb4f9a0vbi5r89i00f548z0y5j1kp7-gh-2.98.0",
               "default": true
             }
           ],
-          "store_path": "/nix/store/waa7fl1d466lkihg89p60iisjwynyfb7-gh-2.96.0"
+          "store_path": "/nix/store/j5mb4f9a0vbi5r89i00f548z0y5j1kp7-gh-2.98.0"
         },
         "x86_64-linux": {
           "outputs": [
             {
               "name": "out",
-              "path": "/nix/store/9jyx6hrsjdcjx1gxmipj45bij5vzvq19-gh-2.96.0",
+              "path": "/nix/store/dpiajg8vgzpaq74jc79j01fd5bja3cik-gh-2.98.0",
               "default": true
             }
           ],
-          "store_path": "/nix/store/9jyx6hrsjdcjx1gxmipj45bij5vzvq19-gh-2.96.0"
+          "store_path": "/nix/store/dpiajg8vgzpaq74jc79j01fd5bja3cik-gh-2.98.0"
         }
       }
     },
@@ -299,7 +289,7 @@
     },
     "nodejs@24.12.0": {
       "last_modified": "2025-12-29T16:45:58Z",
-      "plugin_version": "0.0.4",
+      "plugin_version": "0.0.5",
       "resolved": "github:NixOS/nixpkgs/346dd96ad74dc4457a9db9de4f4f57dab2e5731d#nodejs_24",
       "source": "devbox-search",
       "version": "24.12.0",
@@ -378,51 +368,41 @@
         }
       }
     },
-    "openspec@1.4.1": {
-      "last_modified": "2026-07-23T05:10:05Z",
-      "resolved": "github:NixOS/nixpkgs/7525d999cd850b9a488817abc89c75dc733acf17#openspec",
+    "openspec@1.10.0": {
+      "last_modified": "2026-08-27T07:16:00Z",
+      "resolved": "github:NixOS/nixpkgs/c27cdad491a991b11ed731760aa2ef8db0cb0410#openspec",
       "source": "devbox-search",
-      "version": "1.4.1",
+      "version": "1.10.0",
       "systems": {
         "aarch64-darwin": {
           "outputs": [
             {
               "name": "out",
-              "path": "/nix/store/vcmjq207pjfd1aaspn38adsqj4ckr8h4-openspec-1.4.1",
+              "path": "/nix/store/pr9icbk8bhzb3bzi5j6k26rj5yyan1fb-openspec-1.10.0",
               "default": true
             }
           ],
-          "store_path": "/nix/store/vcmjq207pjfd1aaspn38adsqj4ckr8h4-openspec-1.4.1"
+          "store_path": "/nix/store/pr9icbk8bhzb3bzi5j6k26rj5yyan1fb-openspec-1.10.0"
         },
         "aarch64-linux": {
           "outputs": [
             {
               "name": "out",
-              "path": "/nix/store/ki755k939p8757p1pxy8qgcnifzwwags-openspec-1.4.1",
-              "default": true
-            }
-          ],
-          "store_path": "/nix/store/ki755k939p8757p1pxy8qgcnifzwwags-openspec-1.4.1"
-        },
-        "x86_64-darwin": {
-          "outputs": [
-            {
-              "name": "out",
-              "path": "/nix/store/bj0q7lihd2jhkjh553jiv30aiqj8p3dy-openspec-1.4.1",
+              "path": "/nix/store/chrwyi7a9npbaf7vlq7cl56i8rggpvqj-openspec-1.10.0",
               "default": true
             }
           ],
-          "store_path": "/nix/store/bj0q7lihd2jhkjh553jiv30aiqj8p3dy-openspec-1.4.1"
+          "store_path": "/nix/store/chrwyi7a9npbaf7vlq7cl56i8rggpvqj-openspec-1.10.0"
         },
         "x86_64-linux": {
           "outputs": [
             {
               "name": "out",
-              "path": "/nix/store/5la79nlvwl0ni8a1ic65y1nrnp0l6p25-openspec-1.4.1",
+              "path": "/nix/store/phgx7fgi29vpfydrdd65rgmi4sgi5r3w-openspec-1.10.0",
               "default": true
             }
           ],
-          "store_path": "/nix/store/5la79nlvwl0ni8a1ic65y1nrnp0l6p25-openspec-1.4.1"
+          "store_path": "/nix/store/phgx7fgi29vpfydrdd65rgmi4sgi5r3w-openspec-1.10.0"
         }
       }
     },