diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml
index b371363b4..303d49b10 100644
--- a/.github/workflows/actionlint.yml
+++ b/.github/workflows/actionlint.yml
@@ -93,7 +93,7 @@ jobs:
           path: results.sarif
 
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.11
+        uses: github/codeql-action/upload-sarif@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.30.0
         with:
           sarif_file: results.sarif
           category: zizmor
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5e38f7b6e..5a1c28115 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -24,7 +24,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Ruby
-        uses: ruby/setup-ruby@efbf473cab83af4468e8606cc33eca9281bb213f # v1.256.0
+        uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb # v1.257.0
         with:
           ruby-version: ruby
 
diff --git a/.github/workflows/stale-issues.yml b/.github/workflows/stale-issues.yml
index c4bfc33e0..a0e08355d 100644
--- a/.github/workflows/stale-issues.yml
+++ b/.github/workflows/stale-issues.yml
@@ -38,7 +38,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Mark/Close Stale Issues and Pull Requests
-        uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9.1.0
+        uses: actions/stale@3a9db7e6a41a89f618792c92c0e97cc736e1b13f # v10.0.0
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           days-before-stale: 21
@@ -68,7 +68,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Mark/Close Stale `bump-formula-pr` and `bump-cask-pr` Pull Requests
-        uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9.1.0
+        uses: actions/stale@3a9db7e6a41a89f618792c92c0e97cc736e1b13f # v10.0.0
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           days-before-stale: 2
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index ad8fa99d1..b07a00829 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -23,7 +23,7 @@ jobs:
         persist-credentials: false
 
     - name: Set up Ruby
-      uses: ruby/setup-ruby@efbf473cab83af4468e8606cc33eca9281bb213f # v1.256.0
+      uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb # v1.257.0
       with:
         ruby-version: ${{ matrix.ruby }}
         bundler-cache: true
@@ -37,7 +37,7 @@ jobs:
       run: bundle exec rubocop -D lib/
 
     - name: Upload coverage results
-      uses: codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00 # v5.5.0
+      uses: codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7 # v5.5.1
       with:
         files: coverage/coverage.xml
         disable_search: true
diff --git a/Brewfile b/Brewfile
new file mode 100644
index 000000000..f3d142c3e
--- /dev/null
+++ b/Brewfile
@@ -0,0 +1 @@
+brew "ruby"
diff --git a/Gemfile.lock b/Gemfile.lock
index 6b5d5f6c6..e84376eca 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -26,7 +26,7 @@ GEM
     rake (13.3.0)
     regexp_parser (2.11.2)
     rexml (3.4.2)
-    rubocop (1.80.1)
+    rubocop (1.80.2)
       json (~> 2.3)
       language_server-protocol (~> 3.17.0.2)
       lint_roller (~> 1.1.0)
diff --git a/lib/macho/exceptions.rb b/lib/macho/exceptions.rb
index 02997f1d4..89bfc15ab 100644
--- a/lib/macho/exceptions.rb
+++ b/lib/macho/exceptions.rb
@@ -71,10 +71,10 @@ def initialize(fat_cputype, fat_cpusubtype, macho_cputype, macho_cpusubtype)
       # @param cpusubtype_fat [Integer] the CPU subtype in the fat header
       # @param cputype_macho [Integer] the CPU type in the macho header
       # @param cpusubtype_macho [Integer] the CPU subtype in the macho header
-      super(("Mismatch between cputypes >> 0x%08<fat_cputype>x and 0x%08<macho_cputype>x\n" \
-             "and/or cpusubtypes >> 0x%08<fat_cpusubtype>x and 0x%08<macho_cpusubtype>x" %
-            { :fat_cputype => fat_cputype, :macho_cputype => macho_cputype,
-              :fat_cpusubtype => fat_cpusubtype, :macho_cpusubtype => macho_cpusubtype }))
+      super("Mismatch between cputypes >> 0x%08<fat_cputype>x and 0x%08<macho_cputype>x\n" \
+            "and/or cpusubtypes >> 0x%08<fat_cpusubtype>x and 0x%08<macho_cpusubtype>x" %
+        { :fat_cputype => fat_cputype, :macho_cputype => macho_cputype,
+          :fat_cpusubtype => fat_cpusubtype, :macho_cpusubtype => macho_cpusubtype })
     end
   end