diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 0c49f25..ce0a90f 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -1,4 +1,6 @@
 name: Lint
+permissions:
+  contents: read
 
 on:
   push:
@@ -22,12 +24,12 @@ jobs:
       - name: Set up Python
         uses: actions/setup-python@v6
         with:
-          python-version: "3.12"
+          python-version: "3.14"
 
       - name: Install dependencies
         run: |
           uv sync
-          uv pip install ruff mypy pytest
+          uv add ruff mypy pytest
 
       - name: Run ruff check
         run: uv run ruff check src/ tests/
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 8a00909..28db2b0 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -1,4 +1,6 @@
 name: Tests
+permissions:
+  contents: read
 
 on:
   push:
@@ -10,9 +12,12 @@ jobs:
   test:
     name: Test Python ${{ matrix.python-version }}
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     strategy:
       matrix:
-        python-version: ["3.8", "3.9", "3.10", "3.11", "3.12"]
+        python-version: ["3.8", "3.9", "3.10", "3.11", "3.12", "3.13", "3.14", "3.14t"]
 
     steps:
       - uses: actions/checkout@v4
diff --git a/pyproject.toml b/pyproject.toml
index 8c8824b..3bb48f2 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -8,6 +8,9 @@ authors = [
 ]
 requires-python = ">=3.8"
 dependencies = [
+    "mypy>=1.14.1",
+    "pytest>=8.3.5",
+    "ruff>=0.14.4",
     "typing-extensions>=4.0.0; python_version < '3.10'",
 ]
 license = { text = "MIT" }