diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 811ccc31..c2fc74ab 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -29,12 +29,12 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@45c373516f557556c15d420e3f5e0aa3d64366bc # v3.31.9
+        uses: github/codeql-action/init@4bdb89f48054571735e3792627da6195c57459e2 # v3.31.10
         with:
           languages: ${{ matrix.language }}
           queries: security-extended,security-and-quality
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@45c373516f557556c15d420e3f5e0aa3d64366bc # v3.31.9
+        uses: github/codeql-action/analyze@4bdb89f48054571735e3792627da6195c57459e2 # v3.31.10
         with:
           category: '/language:${{matrix.language}}'
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
index 0476ca59..60663274 100644
--- a/.github/workflows/semgrep.yml
+++ b/.github/workflows/semgrep.yml
@@ -16,7 +16,7 @@ jobs:
     env:
       SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
     container:
-      image: returntocorp/semgrep@sha256:15c3954ba7e0f8ade909e021d85a7c448909d25e1453a1f3e2d3fe8ec2bd5800 # latest
+      image: returntocorp/semgrep@sha256:815298b52c3c125542208bc296a609db99cde7e53291a533196d4bddf08139ea # latest
     steps:
     - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
     - run: semgrep ci
diff --git a/package.json b/package.json
index 3e564b96..15848e73 100644
--- a/package.json
+++ b/package.json
@@ -3,10 +3,10 @@
   "author": "The OpenINF Authors & Friends",
   "private": "true",
   "description": "The OpenINF portal, other static resources, and more static electricity",
-  "packageManager": "pnpm@10.27.0",
+  "packageManager": "pnpm@10.28.0",
   "engines": {
-    "node": "22.21.1",
-    "pnpm": "10.27.0"
+    "node": "22.22.0",
+    "pnpm": "10.28.0"
   },
   "exports": {
     "./build/constants": "./build/shared/constants.mjs",
@@ -34,7 +34,7 @@
     "@types/console-log-level": "1.4.5",
     "@types/gulp": "4.0.18",
     "@types/js-yaml": "4.0.9",
-    "@types/node": "22.19.3",
+    "@types/node": "22.19.7",
     "@yarnpkg/shell": "4.1.3",
     "autoprefixer": "10.4.23",
     "bootstrap": "5.3.8",
@@ -62,7 +62,7 @@
     "markdownlint-cli2": "0.20.0",
     "markdownlint-cli2-formatter-default": "0.0.6",
     "nps": "5.10.0",
-    "prettier": "3.7.4",
+    "prettier": "3.8.0",
     "remark": "15.0.1",
     "remark-cli": "12.0.1",
     "remark-directive": "4.0.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 1bcf91d9..f9dff6ec 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -25,7 +25,7 @@ importers:
         version: 2.0.1
       '@shopify/prettier-plugin-liquid':
         specifier: 1.10.0
-        version: 1.10.0(prettier@3.7.4)
+        version: 1.10.0(prettier@3.8.0)
       '@tsconfig/node-lts':
         specifier: 22.0.4
         version: 22.0.4
@@ -39,8 +39,8 @@ importers:
         specifier: 4.0.9
         version: 4.0.9
       '@types/node':
-        specifier: 22.19.3
-        version: 22.19.3
+        specifier: 22.19.7
+        version: 22.19.7
       '@yarnpkg/shell':
         specifier: 4.1.3
         version: 4.1.3(typanion@3.14.0)
@@ -123,8 +123,8 @@ importers:
         specifier: 5.10.0
         version: 5.10.0
       prettier:
-        specifier: 3.7.4
-        version: 3.7.4
+        specifier: 3.8.0
+        version: 3.8.0
       remark:
         specifier: 15.0.1
         version: 15.0.1
@@ -202,7 +202,7 @@ importers:
         version: 7.0.1
       remark-preset-prettier:
         specifier: 2.0.2
-        version: 2.0.2(prettier@3.7.4)
+        version: 2.0.2(prettier@3.8.0)
       remark-retext:
         specifier: 6.0.1
         version: 6.0.1
@@ -1145,8 +1145,8 @@ packages:
   '@types/nlcst@2.0.3':
     resolution: {integrity: sha512-vSYNSDe6Ix3q+6Z7ri9lyWqgGhJTmzRjZRqyq15N0Z/1/UnVsno9G/N40NBijoYx2seFDIl0+B2mgAb9mezUCA==}
 
-  '@types/node@22.19.3':
-    resolution: {integrity: sha512-1N9SBnWYOJTrNZCdh/yJE+t910Y128BoyY+zBLWhL3r0TYzlTmFdXrPwHL9DyFZmlEXNQQolTZh3KHV31QDhyA==}
+  '@types/node@22.19.7':
+    resolution: {integrity: sha512-MciR4AKGHWl7xwxkBa6xUGxQJ4VBOmPTF7sL+iGzuahOFaO0jHCsuEfS80pan1ef4gWId1oWOweIhrDEYLuaOw==}
 
   '@types/picomatch@4.0.2':
     resolution: {integrity: sha512-qHHxQ+P9PysNEGbALT8f8YOSHW0KJu6l2xU8DYY0fu/EmGxXdVnuTLvFUvBgPJMSqXq29SYHveejeAha+4AYgA==}
@@ -3558,8 +3558,8 @@ packages:
   prefix-matches@1.0.1:
     resolution: {integrity: sha512-VXwWx7Ws2VSKIYXBPDGjhh1fTgNkeVwWGV+Ysi9mEnduw763FuDQBSUSRKtZ7ZUUEUFAvkbUpUEwgw4g1r1m+A==}
 
-  prettier@3.7.4:
-    resolution: {integrity: sha512-v6UNi1+3hSlVvv8fSaoUbggEM5VErKmmpGA7Pl3HF8V6uKY7rvClBOJlH6yNwQtfTueNkGVpOv/mtWL9L4bgRA==}
+  prettier@3.8.0:
+    resolution: {integrity: sha512-yEPsovQfpxYfgWNhCfECjG5AQaO+K3dp6XERmOepyPDVqcJm+bjyCVO3pmU+nAPe0N5dDvekfGezt/EIiRe1TA==}
     engines: {node: '>=14'}
     hasBin: true
 
@@ -5482,11 +5482,11 @@ snapshots:
       line-column: 1.0.2
       ohm-js: 17.3.0
 
-  '@shopify/prettier-plugin-liquid@1.10.0(prettier@3.7.4)':
+  '@shopify/prettier-plugin-liquid@1.10.0(prettier@3.8.0)':
     dependencies:
       '@shopify/liquid-html-parser': 2.9.0
       html-styles: 1.0.0
-      prettier: 3.7.4
+      prettier: 3.8.0
 
   '@sindresorhus/merge-streams@2.3.0': {}
 
@@ -5507,13 +5507,13 @@ snapshots:
 
   '@types/concat-stream@2.0.3':
     dependencies:
-      '@types/node': 22.19.3
+      '@types/node': 22.19.7
 
   '@types/console-log-level@1.4.5': {}
 
   '@types/cors@2.8.19':
     dependencies:
-      '@types/node': 22.19.3
+      '@types/node': 22.19.7
 
   '@types/debug@4.1.12':
     dependencies:
@@ -5529,13 +5529,13 @@ snapshots:
 
   '@types/glob-stream@8.0.3':
     dependencies:
-      '@types/node': 22.19.3
+      '@types/node': 22.19.7
       '@types/picomatch': 4.0.2
       '@types/streamx': 2.9.5
 
   '@types/gulp@4.0.18':
     dependencies:
-      '@types/node': 22.19.3
+      '@types/node': 22.19.7
       '@types/undertaker': 1.2.12
       '@types/vinyl-fs': 3.0.7
       chokidar: 3.6.0
@@ -5571,7 +5571,7 @@ snapshots:
     dependencies:
       '@types/unist': 3.0.3
 
-  '@types/node@22.19.3':
+  '@types/node@22.19.7':
     dependencies:
       undici-types: 6.21.0
 
@@ -5581,7 +5581,7 @@ snapshots:
 
   '@types/streamx@2.9.5':
     dependencies:
-      '@types/node': 22.19.3
+      '@types/node': 22.19.7
 
   '@types/supports-color@8.1.3': {}
 
@@ -5591,7 +5591,7 @@ snapshots:
 
   '@types/undertaker@1.2.12':
     dependencies:
-      '@types/node': 22.19.3
+      '@types/node': 22.19.7
       '@types/undertaker-registry': 1.0.4
       async-done: 1.3.2
 
@@ -5602,13 +5602,13 @@ snapshots:
   '@types/vinyl-fs@3.0.7':
     dependencies:
       '@types/glob-stream': 8.0.3
-      '@types/node': 22.19.3
+      '@types/node': 22.19.7
       '@types/vinyl': 2.0.12
 
   '@types/vinyl@2.0.12':
     dependencies:
       '@types/expect': 1.20.4
-      '@types/node': 22.19.3
+      '@types/node': 22.19.7
 
   '@ungap/structured-clone@1.3.0': {}
 
@@ -6449,7 +6449,7 @@ snapshots:
   engine.io@6.6.5:
     dependencies:
       '@types/cors': 2.8.19
-      '@types/node': 22.19.3
+      '@types/node': 22.19.7
       accepts: 1.3.8
       base64id: 2.0.0
       cookie: 0.7.2
@@ -8362,7 +8362,7 @@ snapshots:
       is-object: 1.0.2
       starts-with: 1.0.2
 
-  prettier@3.7.4: {}
+  prettier@3.8.0: {}
 
   proc-log@4.2.0: {}
 
@@ -9085,9 +9085,9 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  remark-preset-prettier@2.0.2(prettier@3.7.4):
+  remark-preset-prettier@2.0.2(prettier@3.8.0):
     dependencies:
-      prettier: 3.7.4
+      prettier: 3.8.0
 
   remark-retext@6.0.1:
     dependencies:
@@ -9868,7 +9868,7 @@ snapshots:
       '@types/concat-stream': 2.0.3
       '@types/debug': 4.1.12
       '@types/is-empty': 1.2.3
-      '@types/node': 22.19.3
+      '@types/node': 22.19.7
       '@types/unist': 3.0.3
       concat-stream: 2.0.0
       debug: 4.4.3