diff --git a/.github/workflows/php.yml b/.github/workflows/php.yml
index f440f543c..5f38f7e5c 100644
--- a/.github/workflows/php.yml
+++ b/.github/workflows/php.yml
@@ -175,7 +175,7 @@ jobs:
       run: vendor/bin/phpunit --testsuite integration,unit --coverage-text --coverage-clover=coverage.clover
 
     - name: Code Coverage
-      uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
+      uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
       # only generate coverage against the latest PHP version
       if: ${{ matrix.php-version == '8.4' }}
       with:
diff --git a/docker-compose.yaml b/docker-compose.yaml
index f69c49dc9..2cdc3fff7 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -45,7 +45,7 @@ services:
     ports:
       - "5672:5672/tcp"
   kafka:
-    image: confluentinc/cp-kafka:7.9.5@sha256:c4c6b755551da17fff056b9c8b39700f99020083bd2d69a171ece4784f33e640
+    image: confluentinc/cp-kafka:7.9.6@sha256:9e178783dba8cf44cd8b1d260f548a587a21235921957edd4ed7aa7d060b0852
     hostname: kafka
     ports:
       - "9092:9092/tcp"