diff --git a/.bumpversion.toml b/.bumpversion.toml
index af5ff6d..cfb5766 100644
--- a/.bumpversion.toml
+++ b/.bumpversion.toml
@@ -1,5 +1,5 @@
 [tool.bumpversion]
-current_version = "1.4.1"
+current_version = "1.4.2"
 parse = "(?P<major>\\d+)\\.(?P<minor>\\d+)\\.(?P<patch>\\d+)"
 serialize = ["{major}.{minor}.{patch}"]
 search  = "{current_version}"
diff --git a/.github/labeler.yml b/.github/labeler.yml
new file mode 100644
index 0000000..5cbb2ec
--- /dev/null
+++ b/.github/labeler.yml
@@ -0,0 +1,6 @@
+bug:
+  - "error"
+  - "fail"
+feature:
+  - "feature request"
+  - "enhancement"
diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md
new file mode 100644
index 0000000..909eebd
--- /dev/null
+++ b/.github/pull_request_template.md
@@ -0,0 +1,33 @@
+## 📝 What’s Changed?
+
+<!-- Briefly describe the main changes in this PR -->
+- ...
+
+## 🔍 Why is this Change Needed?
+
+<!-- Explain the reason or motivation behind the change -->
+- ...
+
+## 🧪 How Was This Tested?
+
+<!-- Describe how you tested the changes -->
+- [ ] Added or updated unit tests
+- [ ] Manually tested in development environment
+- [ ] CI/CD pipeline passed successfully
+
+## ✅ Checklist
+
+- [ ] Code follows the style guide
+- [ ] All tests are passing
+- [ ] Documentation updated if needed
+- [ ] No breaking changes (or clearly documented)
+
+## 📸 Screenshots / Logs (Optional)
+
+<!-- Add any relevant UI screenshots or logs -->
+_(e.g., Home Assistant UI, terminal output, etc.)_
+
+## 📎 Additional Notes
+
+<!-- Add anything else reviewers should know -->
+- ...
diff --git a/.github/workflows/hacs.yml b/.github/workflows/hacs.yml
index 2814f7f..138dcc3 100644
--- a/.github/workflows/hacs.yml
+++ b/.github/workflows/hacs.yml
@@ -8,7 +8,11 @@ on:
     types: [published]
   schedule:
     - cron: "0 0 * * *"
-    
+
+
+permissions:
+  contents: read
+  
 jobs:
   validate-hacs:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/hassfest.yml b/.github/workflows/hassfest.yml
index 950fffb..28f9b6c 100644
--- a/.github/workflows/hassfest.yml
+++ b/.github/workflows/hassfest.yml
@@ -11,6 +11,9 @@ on:
     branches:
       - dev
 
+permissions:
+  contents: read
+  
 jobs:
   hassfest:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/label-issues.yml b/.github/workflows/label-issues.yml
index d5f99f0..9a3db9f 100644
--- a/.github/workflows/label-issues.yml
+++ b/.github/workflows/label-issues.yml
@@ -4,15 +4,13 @@ on:
     types:
       - reopened
       - opened
+      - edited
 jobs:
   label_issues:
     runs-on: ubuntu-latest
     permissions:
       issues: write
     steps:
-      - run: gh issue edit "$NUMBER" --add-label "$LABELS"
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          GH_REPO: ${{ github.repository }}
-          NUMBER: ${{ github.event.issue.number }}
-          LABELS: triage
+      - uses: peaceiris/actions-issue-labeler@v1
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
\ No newline at end of file
diff --git a/.github/workflows/precommit.yml b/.github/workflows/precommit.yml
index eddaad0..c45911d 100644
--- a/.github/workflows/precommit.yml
+++ b/.github/workflows/precommit.yml
@@ -11,6 +11,9 @@ on:
       - main
   workflow_dispatch:
 
+permissions:
+  contents: write
+  
 jobs:
   test:
     env:
diff --git a/.github/workflows/pytest.yml b/.github/workflows/pytest.yml
index 116d3ca..a8bb832 100644
--- a/.github/workflows/pytest.yml
+++ b/.github/workflows/pytest.yml
@@ -11,6 +11,9 @@ on:
       - main
   workflow_dispatch:
 
+permissions:
+  contents: read
+  
 jobs:
   test:
     env:
diff --git a/.github/workflows/release-versioning.yml b/.github/workflows/release-versioning.yml
index 30e399b..3e2d43d 100644
--- a/.github/workflows/release-versioning.yml
+++ b/.github/workflows/release-versioning.yml
@@ -9,6 +9,9 @@ on:
   release:
     types: [published]
 
+permissions:
+  contents: write
+  
 jobs:
   bump-release:
     # Zorg dat we alleen in deze job de tag-push afhandelen
@@ -19,6 +22,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          ref: main
 
       - name: Setup Python
         uses: actions/setup-python@v5
@@ -36,7 +40,7 @@ jobs:
         run: |
           git config user.name "github-actions[bot]"
           git config user.email "github-actions[bot]@users.noreply.github.com"
-          git add custom_components/simple_pid_controller/manifest.json
+          git add custom_components/simple_pid_controller/manifest.json setup.cfg
           git commit -m "chore: bump to next version after release ${{ github.ref_name }}"
           git push origin HEAD:main
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 69f4b4a..bda5721 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -4,6 +4,9 @@ on:
   release:
     types: [published]
 
+permissions:
+  contents: write
+  
 jobs:
   build-and-upload:
     runs-on: ubuntu-latest
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..bfb64d9
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,44 @@
+# Security Policy
+
+## Supported Versions
+
+We currently support the latest released version of this project. Previous versions may not receive security updates.
+
+| Version | Supported |
+|---------|-----------|
+| latest  | ✅         |
+| older   | ❌         |
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability in this project, **please do not open an issue or pull request publicly**.
+
+Instead, report it confidentially via email:
+
+📧 **bvweerd@users.noreply.github.com**
+
+Please include the following (if possible):
+- Description of the vulnerability
+- Steps to reproduce
+- Potential impact
+- Suggested mitigation (optional)
+
+We aim to respond within **5 business days**.
+
+## Scope
+
+This policy covers:
+- Source code in this repository
+- Configuration files and scripts that are part of the published release
+
+This policy does **not** cover:
+- Third-party dependencies
+- Home Assistant core or any other integrations outside this repository
+
+## Acknowledgements
+
+We appreciate responsible disclosure and will credit contributors if desired and appropriate.
+
+---
+
+Thanks for helping keep this project and its users secure.
diff --git a/custom_components/simple_pid_controller/manifest.json b/custom_components/simple_pid_controller/manifest.json
index ad3db97..1cc62c8 100644
--- a/custom_components/simple_pid_controller/manifest.json
+++ b/custom_components/simple_pid_controller/manifest.json
@@ -11,6 +11,6 @@
   "quality_scale": "silver",
   "requirements": ["simple-pid==2.0.1"],
   "ssdp": [],
-  "version": "1.4.1",
+  "version": "1.4.2",
   "zeroconf": []
 }
diff --git a/custom_components/simple_pid_controller/number.py b/custom_components/simple_pid_controller/number.py
index 7d4b337..f920960 100644
--- a/custom_components/simple_pid_controller/number.py
+++ b/custom_components/simple_pid_controller/number.py
@@ -33,8 +33,8 @@
         "name": "Kp",
         "key": "kp",
         "unit": "",
-        "min": -10.0,
-        "max": 10.0,
+        "min": -100.0,
+        "max": 100.0,
         "step": 0.001,
         "default": 1.0,
         "entity_category": EntityCategory.CONFIG,
@@ -43,8 +43,8 @@
         "name": "Ki",
         "key": "ki",
         "unit": "",
-        "min": -10.0,
-        "max": 10.0,
+        "min": -100.0,
+        "max": 100.0,
         "step": 0.001,
         "default": 0.1,
         "entity_category": EntityCategory.CONFIG,
@@ -53,8 +53,8 @@
         "name": "Kd",
         "key": "kd",
         "unit": "",
-        "min": -10.0,
-        "max": 10.0,
+        "min": -100.0,
+        "max": 100.0,
         "step": 0.001,
         "default": 0.05,
         "entity_category": EntityCategory.CONFIG,