diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index d21b977622..55fe41e7b0 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -11,6 +11,10 @@ updates:
         patterns:
           - 'react'
           - 'react-dom'
+      tsdown:
+        patterns:
+          - 'tsdown'
+          - '@tsdown/*'
       vitest:
         patterns:
           - 'vitest'
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index be3532985a..db4a04c65b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -8,6 +8,7 @@ on:
 jobs:
   test:
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
       - uses: actions/checkout@v6
 
@@ -36,6 +37,7 @@ jobs:
 
       - name: Install Playwright Browsers
         run: npx playwright install chromium firefox
+        timeout-minutes: 2
 
       - name: Test
         run: node --run test:ci
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index b9e761e697..3cd7cc3bbe 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -10,8 +10,8 @@ on:
 
 jobs:
   publish:
-    name: Publish
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     permissions:
       contents: write
       id-token: write
@@ -47,6 +47,7 @@ jobs:
 
       - name: Install Playwright Browsers
         run: npx playwright install chromium firefox
+        timeout-minutes: 2
 
       - name: Test
         run: node --run test:ci
diff --git a/.github/workflows/update-screenshots.yml b/.github/workflows/update-screenshots.yml
index 7a29a858bd..0c052c3d62 100644
--- a/.github/workflows/update-screenshots.yml
+++ b/.github/workflows/update-screenshots.yml
@@ -9,6 +9,7 @@ jobs:
   update-screenshots:
     if: ${{ github.event.label.name == 'Update Screenshots' || github.event_name == 'workflow_dispatch' }}
     runs-on: ubuntu-latest
+    timeout-minutes: 10
 
     permissions:
       contents: write
@@ -23,23 +24,31 @@ jobs:
       - uses: actions/checkout@v6
         with:
           ref: ${{ github.head_ref }}
+
       - uses: actions/setup-node@v6
         with:
           node-version-file: 'package.json'
           check-latest: true
+
       - name: Remove label
         if: github.event_name == 'pull_request'
         run: gh pr edit --remove-label 'Update Screenshots'
         env:
           GH_TOKEN: ${{ github.token }}
+
       - name: Install dependencies
         run: npm i
+
       - name: Install Playwright Browsers
         run: npx playwright install chromium firefox
+        timeout-minutes: 2
+
       - name: Update screenshots
         run: |
           rm -r test/**/screenshots/**
           node --run test:ci:update
+        timeout-minutes: 4
+
       - name: Push new screenshots
         run: |
           git config user.name "${{ github.actor }}"
diff --git a/package.json b/package.json
index 14f95cdb2e..854a818774 100644
--- a/package.json
+++ b/package.json
@@ -52,7 +52,7 @@
     "@faker-js/faker": "^10.3.0",
     "@tanstack/react-router": "^1.166.7",
     "@tanstack/router-plugin": "^1.166.7",
-    "@tsdown/css": "^0.21.9",
+    "@tsdown/css": "^0.22.0",
     "@types/node": "^25.6.0",
     "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
@@ -68,12 +68,12 @@
     "eslint-plugin-sonarjs": "^4.0.3",
     "jspdf": "^4.2.0",
     "jspdf-autotable": "^5.0.7",
-    "oxfmt": "0.48.0",
-    "playwright": "~1.59.0",
+    "oxfmt": "0.50.0",
+    "playwright": "~1.60.0",
     "postcss": "^8.5.2",
     "react": "^19.2.5",
     "react-dom": "^19.2.5",
-    "tsdown": "^0.21.9",
+    "tsdown": "^0.22.0",
     "typescript": "~6.0.3",
     "typescript-eslint": "^8.59.0",
     "vite": "^8.0.9",