diff --git a/.github/workflows/node.js.yml b/.github/workflows/node.js.yml
index b12c56f..36ff2ea 100644
--- a/.github/workflows/node.js.yml
+++ b/.github/workflows/node.js.yml
@@ -8,9 +8,9 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - name: Use Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           cache-dependency-path: |
             example/package-lock.json
diff --git a/example/package-lock.json b/example/package-lock.json
index b9cafd9..d3600ee 100644
--- a/example/package-lock.json
+++ b/example/package-lock.json
@@ -26,24 +26,24 @@
         "type-route": "^1.1.0"
       },
       "devDependencies": {
-        "@eslint/eslintrc": "^3.1.0",
-        "@eslint/js": "^9.36.0",
-        "@types/node": "^22.13.10",
+        "@eslint/eslintrc": "3.3.1",
+        "@eslint/js": "9.37.0",
+        "@types/node": "22.17.1",
         "@types/react": "19.2.2",
         "@types/react-dom": "19.2.1",
         "@typescript-eslint/eslint-plugin": "8.46.0",
         "@typescript-eslint/parser": "8.46.0",
-        "@vitejs/plugin-react": "^5.0.0",
-        "convex-test": "^0.0.38",
-        "eslint": "^9.36.0",
-        "eslint-plugin-react-hooks": "^7.0.0",
-        "eslint-plugin-react-refresh": "^0.4.22",
-        "globals": "^16.3.0",
+        "@vitejs/plugin-react": "5.0.0",
+        "convex-test": "0.0.38",
+        "eslint": "9.37.0",
+        "eslint-plugin-react-hooks": "7.0.0",
+        "eslint-plugin-react-refresh": "0.4.23",
+        "globals": "16.4.0",
         "npm-run-all2": "8.0.4",
-        "prettier": "^3.5.3",
-        "typescript": "^5.9.2",
+        "prettier": "3.6.2",
+        "typescript": "5.9.2",
         "typescript-eslint": "8.46.0",
-        "vite": "^7.1.8"
+        "vite": "7.1.9"
       }
     },
     "..": {
@@ -54,21 +54,21 @@
         "@edge-runtime/vm": "5.0.0",
         "@eslint/eslintrc": "3.3.1",
         "@eslint/js": "9.37.0",
-        "@fast-check/vitest": "^0.2.0",
+        "@fast-check/vitest": "0.2.2",
         "@types/node": "20.19.20",
         "@typescript-eslint/eslint-plugin": "8.46.0",
         "@typescript-eslint/parser": "8.46.0",
-        "@vitest/coverage-v8": "^3.2.4",
+        "@vitest/coverage-v8": "3.2.4",
         "chokidar-cli": "3.0.0",
-        "convex-test": "^0.0.38",
+        "convex-test": "0.0.38",
         "eslint": "9.37.0",
         "globals": "16.4.0",
-        "npm-run-all2": "^8.0.4",
+        "npm-run-all2": "8.0.4",
         "pkg-pr-new": "0.0.60",
         "prettier": "3.6.2",
         "typescript": "5.9.3",
         "typescript-eslint": "8.46.0",
-        "vite": "^7.1.8",
+        "vite": "7.1.9",
         "vitest": "3.2.4"
       },
       "peerDependencies": {
diff --git a/example/package.json b/example/package.json
index 95860c6..7c32b76 100644
--- a/example/package.json
+++ b/example/package.json
@@ -32,23 +32,23 @@
     "type-route": "^1.1.0"
   },
   "devDependencies": {
-    "@types/node": "^22.13.10",
+    "@types/node": "22.17.1",
     "@types/react": "19.2.2",
     "@types/react-dom": "19.2.1",
-    "@vitejs/plugin-react": "^5.0.0",
-    "eslint-plugin-react-hooks": "^7.0.0",
-    "eslint-plugin-react-refresh": "^0.4.22",
+    "@vitejs/plugin-react": "5.0.0",
+    "eslint-plugin-react-hooks": "7.0.0",
+    "eslint-plugin-react-refresh": "0.4.23",
     "npm-run-all2": "8.0.4",
-    "prettier": "^3.5.3",
+    "prettier": "3.6.2",
     "typescript-eslint": "8.46.0",
-    "vite": "^7.1.8",
-    "@eslint/eslintrc": "^3.1.0",
-    "@eslint/js": "^9.36.0",
+    "vite": "7.1.9",
+    "@eslint/eslintrc": "3.3.1",
+    "@eslint/js": "9.37.0",
     "@typescript-eslint/eslint-plugin": "8.46.0",
     "@typescript-eslint/parser": "8.46.0",
-    "convex-test": "^0.0.38",
-    "eslint": "^9.36.0",
-    "globals": "^16.3.0",
-    "typescript": "^5.9.2"
+    "convex-test": "0.0.38",
+    "eslint": "9.37.0",
+    "globals": "16.4.0",
+    "typescript": "5.9.2"
   }
 }
diff --git a/package-lock.json b/package-lock.json
index 6b4d992..600f765 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -12,21 +12,21 @@
         "@edge-runtime/vm": "5.0.0",
         "@eslint/eslintrc": "3.3.1",
         "@eslint/js": "9.37.0",
-        "@fast-check/vitest": "^0.2.0",
+        "@fast-check/vitest": "0.2.2",
         "@types/node": "20.19.20",
         "@typescript-eslint/eslint-plugin": "8.46.0",
         "@typescript-eslint/parser": "8.46.0",
-        "@vitest/coverage-v8": "^3.2.4",
+        "@vitest/coverage-v8": "3.2.4",
         "chokidar-cli": "3.0.0",
-        "convex-test": "^0.0.38",
+        "convex-test": "0.0.38",
         "eslint": "9.37.0",
         "globals": "16.4.0",
-        "npm-run-all2": "^8.0.4",
+        "npm-run-all2": "8.0.4",
         "pkg-pr-new": "0.0.60",
         "prettier": "3.6.2",
         "typescript": "5.9.3",
         "typescript-eslint": "8.46.0",
-        "vite": "^7.1.8",
+        "vite": "7.1.9",
         "vitest": "3.2.4"
       },
       "peerDependencies": {
@@ -1779,7 +1779,6 @@
       "resolved": "https://registry.npmjs.org/@vitest/coverage-v8/-/coverage-v8-3.2.4.tgz",
       "integrity": "sha512-EyF9SXU6kS5Ku/U82E259WSnvg6c8KTjppUncuNdm5QHpe17mwREHnjDzozC8x9MZ0xfBUFSaLkRv4TMA75ALQ==",
       "dev": true,
-      "license": "MIT",
       "dependencies": {
         "@ampproject/remapping": "^2.3.0",
         "@bcoe/v8-coverage": "^1.0.2",
@@ -3470,7 +3469,6 @@
       "resolved": "https://registry.npmjs.org/npm-run-all2/-/npm-run-all2-8.0.4.tgz",
       "integrity": "sha512-wdbB5My48XKp2ZfJUlhnLVihzeuA1hgBnqB2J9ahV77wLS+/YAJAlN8I+X3DIFIPZ3m5L7nplmlbhNiFDmXRDA==",
       "dev": true,
-      "license": "MIT",
       "dependencies": {
         "ansi-styles": "^6.2.1",
         "cross-spawn": "^7.0.6",
@@ -3493,11 +3491,10 @@
       }
     },
     "node_modules/npm-run-all2/node_modules/ansi-styles": {
-      "version": "6.2.1",
-      "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.1.tgz",
-      "integrity": "sha512-bN798gFfQX+viw3R7yrGWRqnrN2oRkEkUjjl4JNn4E8GxxbjtG3FbrEIIY3l8/hrwUwIeCZvi4QuOTP4MErVug==",
+      "version": "6.2.3",
+      "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.3.tgz",
+      "integrity": "sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg==",
       "dev": true,
-      "license": "MIT",
       "engines": {
         "node": ">=12"
       },
@@ -3510,7 +3507,6 @@
       "resolved": "https://registry.npmjs.org/isexe/-/isexe-3.1.1.tgz",
       "integrity": "sha512-LpB/54B+/2J5hqQ7imZHfdU31OlgQqx7ZicVlkm9kzg9/w8GKLEcFfJl/t7DCEDueOyBAD6zCCwTO6Fzs0NoEQ==",
       "dev": true,
-      "license": "ISC",
       "engines": {
         "node": ">=16"
       }
@@ -3520,7 +3516,6 @@
       "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz",
       "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
       "dev": true,
-      "license": "MIT",
       "engines": {
         "node": ">=12"
       },
@@ -3533,7 +3528,6 @@
       "resolved": "https://registry.npmjs.org/which/-/which-5.0.0.tgz",
       "integrity": "sha512-JEdGzHwwkrbWoGOlIHqQ5gtprKGOenpDHpxE9zVR1bWbOtYRyPPHMe9FaP6x61CmNaTThSkb0DAJte5jD+DmzQ==",
       "dev": true,
-      "license": "ISC",
       "dependencies": {
         "isexe": "^3.1.1"
       },
@@ -7378,9 +7372,9 @@
       },
       "dependencies": {
         "ansi-styles": {
-          "version": "6.2.1",
-          "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.1.tgz",
-          "integrity": "sha512-bN798gFfQX+viw3R7yrGWRqnrN2oRkEkUjjl4JNn4E8GxxbjtG3FbrEIIY3l8/hrwUwIeCZvi4QuOTP4MErVug==",
+          "version": "6.2.3",
+          "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.3.tgz",
+          "integrity": "sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg==",
           "dev": true
         },
         "isexe": {
diff --git a/package.json b/package.json
index f39ca34..3da5179 100644
--- a/package.json
+++ b/package.json
@@ -70,21 +70,21 @@
     "@edge-runtime/vm": "5.0.0",
     "@eslint/eslintrc": "3.3.1",
     "@eslint/js": "9.37.0",
-    "@fast-check/vitest": "^0.2.0",
+    "@fast-check/vitest": "0.2.2",
     "@types/node": "20.19.20",
     "@typescript-eslint/eslint-plugin": "8.46.0",
     "@typescript-eslint/parser": "8.46.0",
-    "@vitest/coverage-v8": "^3.2.4",
+    "@vitest/coverage-v8": "3.2.4",
     "chokidar-cli": "3.0.0",
-    "convex-test": "^0.0.38",
+    "convex-test": "0.0.38",
     "eslint": "9.37.0",
     "globals": "16.4.0",
-    "npm-run-all2": "^8.0.4",
+    "npm-run-all2": "8.0.4",
     "pkg-pr-new": "0.0.60",
     "prettier": "3.6.2",
     "typescript": "5.9.3",
     "typescript-eslint": "8.46.0",
-    "vite": "^7.1.8",
+    "vite": "7.1.9",
     "vitest": "3.2.4"
   },
   "main": "./dist/commonjs/client/index.js",