diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 70c23ef..33a2d1a 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -8,9 +8,9 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Setup Python
-        uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
         with:
           python-version: 3.13
       - uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1
@@ -26,12 +26,12 @@ jobs:
           - py313
           - pypy3
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Fedora Tox with ${{ matrix.tox_env }}
-        uses: fedora-python/tox-github-action@6f0add50b32e4bedfd98976984ffa499af4c218b # v39.0
+        uses: fedora-python/tox-github-action@807f27871410c7391018dc9a245c8cffdced15e9 # v41.0
         with:
           tox_env: ${{ matrix.tox_env }}
-      - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
         with:
           cache: pip
           cache-dependency-path: |
@@ -41,9 +41,9 @@ jobs:
     name: Build deploy
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
-      - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
-      - uses: casperdcl/deploy-pypi@10cf4cd83fc885003a8d4f37f93a5a0f0fc2d2f4 # v2.4.1
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+      - uses: casperdcl/deploy-pypi@928e3123266d588b46c017228f9a9d4c13ad4c93 # v2.5.0
         with:
           password: ${{ secrets.PYPI_TOKEN }}
           build: true
diff --git a/.snyk b/.snyk
new file mode 100644
index 0000000..80ce25b
--- /dev/null
+++ b/.snyk
@@ -0,0 +1,7 @@
+version: v1.25.0
+ignore:
+  SNYK-PYTHON-ZIPP-7430899:
+    - '*':
+        reason: Introduced by a transitive dependency that is not used in the project. (python 3.7 test in click 1.8.1)
+        expires: 2025-10-31
+patch: {}
diff --git a/requirements-dev.txt b/requirements-dev.txt
index 473a620..9d1d932 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -1,67 +1,59 @@
 #
-# This file is autogenerated by pip-compile with Python 3.9
+# This file is autogenerated by pip-compile with Python 3.13
 # by the following command:
 #
-#    pip-compile requirements-dev.in
+#    pip-compile --output-file=requirements-dev.txt requirements-dev.in
 #
 build==1.2.2.post1
     # via pip-tools
-certifi==2024.8.30
+certifi==2025.7.14
     # via requests
-charset-normalizer==3.4.0
+charset-normalizer==3.4.2
     # via requests
-click==8.1.7
+click==8.1.8
     # via pip-tools
-coverage[toml]==7.6.8
+coverage[toml]==7.9.2
     # via pytest-cov
-exceptiongroup==1.2.2
-    # via pytest
 idna==3.10
     # via requests
-importlib-metadata==8.5.0
-    # via build
-iniconfig==2.0.0
+iniconfig==2.1.0
     # via pytest
-mock==5.1.0
+mock==5.2.0
     # via -r requirements-dev.in
-packaging==24.2
+packaging==25.0
     # via
     #   build
     #   pytest
 pip-tools==7.4.1
     # via -r requirements-dev.in
-pluggy==1.5.0
+pluggy==1.6.0
+    # via
+    #   pytest
+    #   pytest-cov
+pygments==2.19.2
     # via pytest
 pyproject-hooks==1.2.0
     # via
     #   build
     #   pip-tools
-pytest==8.3.3
+pytest==8.4.1
     # via
     #   -r requirements-dev.in
     #   pytest-cov
-pytest-cov==6.0.0
+pytest-cov==6.2.1
     # via -r requirements-dev.in
 pyyaml==6.0.2
     # via responses
-requests==2.32.3
+requests==2.32.4
     # via responses
-responses==0.25.3
+responses==0.25.7
     # via -r requirements-dev.in
-tomli==2.2.1
-    # via
-    #   build
-    #   coverage
-    #   pip-tools
-    #   pytest
-urllib3==2.2.3
+urllib3==2.5.0
     # via
     #   requests
     #   responses
 wheel==0.45.1
     # via pip-tools
-zipp==3.21.0
-    # via importlib-metadata
 
 # The following packages are considered to be unsafe in a requirements file:
 # pip
diff --git a/setup.cfg b/setup.cfg
index 991522e..234c035 100644
--- a/setup.cfg
+++ b/setup.cfg
@@ -9,6 +9,7 @@ maintainer_email = hello@upcloud.com
 url = https://github.com/UpCloudLtd/upcloud-python-api
 packages=['upcloud_api', 'upcloud_api.cloud_manager']
 license = MIT
+license_files = []
 
 [options]
 python_requires = >=3.9, <4