diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index b9a11d34..74588ac7 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -38,7 +38,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v5
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
diff --git a/.github/workflows/gradle.yml b/.github/workflows/gradle.yml
index 008461e5..dc5634ec 100644
--- a/.github/workflows/gradle.yml
+++ b/.github/workflows/gradle.yml
@@ -25,7 +25,7 @@ jobs:
     runs-on: ${{ matrix.os }}
 
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
     - name: Set up openJDK version
       uses: actions/setup-java@v5
       with:
diff --git a/.github/workflows/publishRelease.yml b/.github/workflows/publishRelease.yml
index dedd9bce..ad5c5c33 100644
--- a/.github/workflows/publishRelease.yml
+++ b/.github/workflows/publishRelease.yml
@@ -8,7 +8,7 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
       - name: Set up Java
         uses: actions/setup-java@v5
         with:
diff --git a/build.gradle b/build.gradle
index 66a30e19..8157ada6 100644
--- a/build.gradle
+++ b/build.gradle
@@ -60,7 +60,7 @@ dependencies {
     // compare json documents in tests
     implementation 'com.github.fslev:json-compare:7.2'
     // url validator
-    implementation group: 'commons-validator', name: 'commons-validator', version: '1.10.0'
+    implementation group: 'commons-validator', name: 'commons-validator', version: '1.10.1'
     // logging
     implementation group: 'org.slf4j', name: 'slf4j-jdk14', version: '2.0.17'
     // JSON-LD, Zenodo mapping