diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 0cb1bce6..7bce2174 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -29,12 +29,12 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@458d36d7d4f47d0dd16ca424c1d3cda0060f1360 # v3.35.5
+        uses: github/codeql-action/init@03e4368ac7daa2bd82b3e85262f3bf87ee112f57 # v3.36.0
         with:
           languages: ${{ matrix.language }}
           queries: security-extended,security-and-quality
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@458d36d7d4f47d0dd16ca424c1d3cda0060f1360 # v3.35.5
+        uses: github/codeql-action/analyze@03e4368ac7daa2bd82b3e85262f3bf87ee112f57 # v3.36.0
         with:
           category: '/language:${{matrix.language}}'
diff --git a/package.json b/package.json
index b845e55f..8f83ab99 100644
--- a/package.json
+++ b/package.json
@@ -106,7 +106,7 @@
     "stylelint": "16.26.1",
     "stylelint-config-recess-order": "6.1.0",
     "stylelint-config-standard-scss": "14.0.0",
-    "tsx": "4.22.0",
+    "tsx": "4.22.3",
     "typescript": "5.9.3",
     "unified": "11.0.5",
     "vnu-jar": "24.10.17",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 880e6267..77530376 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -85,7 +85,7 @@ importers:
         version: 1.1.0
       gulp-postcss:
         specifier: 10.0.0
-        version: 10.0.0(postcss@8.5.14)(tsx@4.22.0)
+        version: 10.0.0(postcss@8.5.14)(tsx@4.22.3)
       gulp-rename:
         specifier: 2.1.0
         version: 2.1.0
@@ -255,8 +255,8 @@ importers:
         specifier: 14.0.0
         version: 14.0.0(postcss@8.5.14)(stylelint@16.26.1(typescript@5.9.3))
       tsx:
-        specifier: 4.22.0
-        version: 4.22.0
+        specifier: 4.22.3
+        version: 4.22.3
       typescript:
         specifier: 5.9.3
         version: 5.9.3
@@ -4409,8 +4409,8 @@ packages:
   tslib@2.8.1:
     resolution: {integrity: sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==}
 
-  tsx@4.22.0:
-    resolution: {integrity: sha512-8ccZMPD69s1AbKXx0C5ddTNZfNjwV04iIKgjZmKfKxMynEtSYcK0Lh7iQFh53fI5Yu4pb9usgAiqyPmEONaALg==}
+  tsx@4.22.3:
+    resolution: {integrity: sha512-mdoNxBC/cSQObGGVQ5Bpn5i+yv7j68gk3Nfm3wFjcJg3Z0Mix9jzAFfP12prmm5eVGmDKtp0yyArrs0Q+8gZHg==}
     engines: {node: '>=18.0.0'}
     hasBin: true
 
@@ -6939,12 +6939,12 @@ snapshots:
       through2: 2.0.5
       vinyl-sourcemaps-apply: 0.2.1
 
-  gulp-postcss@10.0.0(postcss@8.5.14)(tsx@4.22.0):
+  gulp-postcss@10.0.0(postcss@8.5.14)(tsx@4.22.3):
     dependencies:
       fancy-log: 2.0.0
       plugin-error: 2.0.1
       postcss: 8.5.14
-      postcss-load-config: 5.1.0(postcss@8.5.14)(tsx@4.22.0)
+      postcss-load-config: 5.1.0(postcss@8.5.14)(tsx@4.22.3)
       vinyl-sourcemaps-apply: 0.2.1
     transitivePeerDependencies:
       - jiti
@@ -8225,13 +8225,13 @@ snapshots:
     dependencies:
       postcss: 8.5.14
 
-  postcss-load-config@5.1.0(postcss@8.5.14)(tsx@4.22.0):
+  postcss-load-config@5.1.0(postcss@8.5.14)(tsx@4.22.3):
     dependencies:
       lilconfig: 3.1.3
       yaml: 2.9.0
     optionalDependencies:
       postcss: 8.5.14
-      tsx: 4.22.0
+      tsx: 4.22.3
 
   postcss-media-query-parser@0.2.3: {}
 
@@ -9848,7 +9848,7 @@ snapshots:
 
   tslib@2.8.1: {}
 
-  tsx@4.22.0:
+  tsx@4.22.3:
     dependencies:
       esbuild: 0.28.0
     optionalDependencies: