diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4ee1bdb..50475b5 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -200,7 +200,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+      - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
         with:
           enable-cache: true
           cache-dependency-glob: python/uv.lock
@@ -225,7 +225,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+      - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
       - name: Ruff format check
         working-directory: python
         run: uvx ruff format --check .
@@ -251,7 +251,7 @@ jobs:
         with:
           ref: ${{ github.head_ref || github.ref_name }}
           persist-credentials: false
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: "22"
           cache: npm
@@ -274,7 +274,7 @@ jobs:
         with:
           ref: ${{ github.head_ref || github.ref_name }}
           persist-credentials: false
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: "22"
           cache: npm
diff --git a/.github/workflows/diffuzz.yml b/.github/workflows/diffuzz.yml
index a79bf23..7bf9f4f 100644
--- a/.github/workflows/diffuzz.yml
+++ b/.github/workflows/diffuzz.yml
@@ -70,7 +70,7 @@ jobs:
 
       - name: Upload divergence corpus
         if: failure()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: diffuzz-divergences
           path: go-native/ressrf/internal/diff/testdata/fuzz/FuzzPolicyDiff/
diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml
index deeab8b..4d62285 100644
--- a/.github/workflows/fuzz.yml
+++ b/.github/workflows/fuzz.yml
@@ -76,7 +76,7 @@ jobs:
 
       - name: Upload crash artifacts
         if: failure()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: fuzz-crashes-${{ matrix.target }}
           path: fuzz/artifacts/${{ matrix.target }}/
@@ -131,7 +131,7 @@ jobs:
 
       - name: Upload crash artifacts
         if: failure()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: go-fuzz-crashes-${{ matrix.target }}
           path: go-native/ressrf/internal/engine/testdata/fuzz/${{ matrix.target }}/
diff --git a/go/ressrf/core.wasm b/go/ressrf/core.wasm
index 3d57ef6..0f7cb28 100644
Binary files a/go/ressrf/core.wasm and b/go/ressrf/core.wasm differ
diff --git a/node/core.wasm b/node/core.wasm
index 3d57ef6..0f7cb28 100644
Binary files a/node/core.wasm and b/node/core.wasm differ