diff --git a/.github/workflows/psalm-matrix.yml b/.github/workflows/psalm-matrix.yml
index 3b5e87a9..970acfa4 100644
--- a/.github/workflows/psalm-matrix.yml
+++ b/.github/workflows/psalm-matrix.yml
@@ -68,7 +68,7 @@ jobs:
           composer i
 
       - name: Check for vulnerable PHP dependencies
-        run: composer require --dev roave/security-advisories:dev-latest
+        run: composer audit --locked
 
       - name: Install dependencies # zizmor: ignore[template-injection]
         run: composer require --dev 'nextcloud/ocp:${{ matrix.ocp-version }}' --ignore-platform-reqs --with-dependencies
diff --git a/appinfo/info.xml b/appinfo/info.xml
index b47b022c..b33df6a2 100644
--- a/appinfo/info.xml
+++ b/appinfo/info.xml
@@ -23,6 +23,7 @@
     <bugs>https://github.com/nextcloud/integration_github/issues</bugs>
     <screenshot>https://github.com/nextcloud/integration_github/raw/main/img/screenshot1.jpg</screenshot>
     <dependencies>
+        <php min-version="8.2"/>
         <nextcloud min-version="33" max-version="36"/>
     </dependencies>
     <background-jobs>
diff --git a/composer.json b/composer.json
index 46e0aab3..b00e15c6 100644
--- a/composer.json
+++ b/composer.json
@@ -32,7 +32,7 @@
 		"optimize-autoloader": true,
 		"classmap-authoritative": true,
 		"platform": {
-			"php": "8.2"
+			"php": "8.2.35"
 		},
 		"allow-plugins": {
 			"bamarni/composer-bin-plugin": true,
@@ -41,7 +41,7 @@
 	},
 	"require-dev": {
 		"ext-mbstring": "*",
-		"nextcloud/ocp": "dev-master"
+		"nextcloud/ocp": "dev-stable33"
 	},
 	"extra": {
 		"bamarni-bin": {
diff --git a/composer.lock b/composer.lock
index 6e3602f5..8ec7c16d 100644
--- a/composer.lock
+++ b/composer.lock
@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "c7083f1461bd67ef44ce5c9f3c3baecf",
+    "content-hash": "817a89707eb0a02d54c51a0cc77d01b0",
     "packages": [
         {
             "name": "bamarni/composer-bin-plugin",
@@ -694,30 +694,29 @@
     "packages-dev": [
         {
             "name": "nextcloud/ocp",
-            "version": "dev-master",
+            "version": "dev-stable33",
             "source": {
                 "type": "git",
                 "url": "https://github.com/nextcloud-deps/ocp.git",
-                "reference": "26aac678bd92adaa91e4e5715ba11cb3f627361d"
+                "reference": "2e0c4f33f8ea2861159700112abbd056a7b93583"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/nextcloud-deps/ocp/zipball/26aac678bd92adaa91e4e5715ba11cb3f627361d",
-                "reference": "26aac678bd92adaa91e4e5715ba11cb3f627361d",
+                "url": "https://api.github.com/repos/nextcloud-deps/ocp/zipball/2e0c4f33f8ea2861159700112abbd056a7b93583",
+                "reference": "2e0c4f33f8ea2861159700112abbd056a7b93583",
                 "shasum": ""
             },
             "require": {
-                "php": "~8.1 || ~8.2 || ~8.3 || ~8.4 || ~8.5",
+                "php": "~8.2 || ~8.3 || ~8.4 || ~8.5",
                 "psr/clock": "^1.0",
                 "psr/container": "^2.0.2",
                 "psr/event-dispatcher": "^1.0",
                 "psr/log": "^3.0.2"
             },
-            "default-branch": true,
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "34.0.0-dev"
+                    "dev-stable33": "33.0.0-dev"
                 }
             },
             "notification-url": "https://packagist.org/downloads/",
@@ -737,9 +736,9 @@
             "description": "Composer package containing Nextcloud's public OCP API and the unstable NCU API",
             "support": {
                 "issues": "https://github.com/nextcloud-deps/ocp/issues",
-                "source": "https://github.com/nextcloud-deps/ocp/tree/master"
+                "source": "https://github.com/nextcloud-deps/ocp/tree/stable33"
             },
-            "time": "2026-03-14T01:06:50+00:00"
+            "time": "2026-10-06T03:44:03+00:00"
         },
         {
             "name": "psr/clock",
@@ -907,7 +906,7 @@
         "ext-mbstring": "*"
     },
     "platform-overrides": {
-        "php": "8.2"
+        "php": "8.2.35"
     },
     "plugin-api-version": "2.9.0"
 }