diff --git a/base-action/package-lock.json b/base-action/package-lock.json
index fd0d474..1272c5f 100644
--- a/base-action/package-lock.json
+++ b/base-action/package-lock.json
@@ -8,7 +8,7 @@
       "name": "@step-security/claude-code-base-action",
       "version": "1.0.0",
       "dependencies": {
-        "@actions/core": "^1.10.1",
+        "@actions/core": "^2.0.0",
         "axios": "^1.13.2",
         "shell-quote": "^1.8.3"
       },
@@ -21,11 +21,13 @@
       }
     },
     "node_modules/@actions/core": {
-      "version": "1.11.1",
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/@actions/core/-/core-2.0.0.tgz",
+      "integrity": "sha512-iGW52/zqhPUFnYl0s1ioXfJu86LGs7b+GYuO38JMPpsh14FQrNj3n2JBpC+vZ2CFS4lERQyn5koLDopY+6V/PQ==",
       "license": "MIT",
       "dependencies": {
         "@actions/exec": "^1.1.1",
-        "@actions/http-client": "^2.0.1"
+        "@actions/http-client": "^3.0.0"
       }
     },
     "node_modules/@actions/exec": {
@@ -36,11 +38,13 @@
       }
     },
     "node_modules/@actions/http-client": {
-      "version": "2.2.3",
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-3.0.0.tgz",
+      "integrity": "sha512-1s3tXAfVMSz9a4ZEBkXXRQD4QhY3+GAsWSbaYpeknPOKEeyRiU3lH+bHiLMZdo2x/fIeQ/hscL1wCkDLVM2DZQ==",
       "license": "MIT",
       "dependencies": {
         "tunnel": "^0.0.6",
-        "undici": "^5.25.4"
+        "undici": "^5.28.5"
       }
     },
     "node_modules/@actions/io": {
@@ -49,6 +53,8 @@
     },
     "node_modules/@fastify/busboy": {
       "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/@fastify/busboy/-/busboy-2.1.1.tgz",
+      "integrity": "sha512-vBZP4NlzfOlerQTnba4aqZoMhE/a9HY7HRqoOPaETQcSQuWEIyZMHGfVu6w9wGtGK5fED5qRs2DteVCjOH60sA==",
       "license": "MIT",
       "engines": {
         "node": ">=14"
@@ -140,8 +146,7 @@
     "node_modules/csstype": {
       "version": "3.1.3",
       "dev": true,
-      "license": "MIT",
-      "peer": true
+      "license": "MIT"
     },
     "node_modules/delayed-stream": {
       "version": "1.0.0",
@@ -406,6 +411,8 @@
     },
     "node_modules/tunnel": {
       "version": "0.0.6",
+      "resolved": "https://registry.npmjs.org/tunnel/-/tunnel-0.0.6.tgz",
+      "integrity": "sha512-1h/Lnq9yajKY2PEbBadPXj3VxsDDu844OnaAo52UVmIzIvwwtBPIuNvkjuzBlTWpfJyUbG3ez0KSBibQkj4ojg==",
       "license": "MIT",
       "engines": {
         "node": ">=0.6.11 <=0.7.0 || >=0.7.3"
@@ -425,6 +432,8 @@
     },
     "node_modules/undici": {
       "version": "5.29.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-5.29.0.tgz",
+      "integrity": "sha512-raqeBD6NQK4SkWhQzeYKd1KmIG6dllBOTt55Rmkt4HtI9mwdWtJljnrXjAFUBLTSN67HWrOIZ3EPF4kjUw80Bg==",
       "license": "MIT",
       "dependencies": {
         "@fastify/busboy": "^2.0.0"
diff --git a/base-action/package.json b/base-action/package.json
index 9674dde..d89a388 100644
--- a/base-action/package.json
+++ b/base-action/package.json
@@ -10,7 +10,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@actions/core": "^1.10.1",
+    "@actions/core": "^2.0.0",
     "axios": "^1.13.2",
     "shell-quote": "^1.8.3"
   },