diff --git a/.github/renovate.json b/.github/renovate.json
index 32ac90d6..f7ad311a 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -1,15 +1,29 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["group:allNonMajor", "schedule:monthly"],
+  "extends": [
+    "group:allNonMajor",
+    "schedule:monthly"
+  ],
+  "semanticCommits": "enabled",
   "packageRules": [
     {
       "description": "Create a PR whenever there is a new major version",
-      "matchUpdateTypes": [
-        "major"
-      ]
+      "matchUpdateTypes": ["major"]
+    },
+    {
+      "description": "Use releasable commit type for runtime dependency updates",
+      "matchManagers": ["pep621", "pip_setup"],
+      "matchDepTypes": ["dependencies"],
+      "semanticCommitType": "fix",
+      "semanticCommitScope": "deps"
+    },
+    {
+      "description": "Keep development-only dependency updates non-releasable",
+      "matchManagers": ["pep621"],
+      "matchDepTypes": ["dependency-groups"],
+      "semanticCommitType": "chore",
+      "semanticCommitScope": "deps"
     }
   ],
-  "ignorePaths": [
-    "examples/**"
-  ]
+  "ignorePaths": ["examples/**"]
 }
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index e5e575fb..c3114a39 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -54,7 +54,7 @@ jobs:
             release-assets.githubusercontent.com:443
 
       - name: Checkout repository
-        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
diff --git a/.github/workflows/conformance-asgi.yml b/.github/workflows/conformance-asgi.yml
index ee568faa..453ec9e3 100644
--- a/.github/workflows/conformance-asgi.yml
+++ b/.github/workflows/conformance-asgi.yml
@@ -32,7 +32,7 @@ jobs:
           release-assets.githubusercontent.com:443
 
     - name: Checkout code
-      uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
     - name: Setup Python
       uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
@@ -43,7 +43,7 @@ jobs:
       run: python -m pip install -e .
 
     - name: Setup Go
-      uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
+      uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
       with:
         go-version: '1.25'
 
diff --git a/.github/workflows/conformance.yml b/.github/workflows/conformance.yml
index 6c14136e..a40d7325 100644
--- a/.github/workflows/conformance.yml
+++ b/.github/workflows/conformance.yml
@@ -35,7 +35,7 @@ jobs:
           release-assets.githubusercontent.com:443
 
     - name: Checkout code
-      uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
     - name: Setup Python
       uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
@@ -46,7 +46,7 @@ jobs:
       run: python -m pip install -e .
 
     - name: Setup Go
-      uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
+      uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
       with:
         go-version: '1.25'
 
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index efa405f8..0362f060 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -25,6 +25,6 @@ jobs:
             api.github.com:443
             github.com:443
       - name: 'Checkout Repository'
-        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: 'Dependency Review'
         uses: actions/dependency-review-action@40c09b7dc99638e5ddb0bfd91c1673effc064d8a # v4.8.1
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index e9088c6a..0704d917 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -21,7 +21,7 @@ jobs:
           github.com:443
           pypi.org:443
 
-    - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
     - name: Setup Python
       uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
     - name: Install tox
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c209a7ed..18a4bc6e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,7 +18,7 @@ jobs:
           egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
       - name: Checkout
-        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           ref: ${{ github.event.release.tag_name }}
       - name: Install Python
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 6fdac794..3688db76 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -47,7 +47,7 @@ jobs:
             
 
       - name: "Checkout code"
-        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/unit.yml b/.github/workflows/unit.yml
index 96a880d2..37d8f81f 100644
--- a/.github/workflows/unit.yml
+++ b/.github/workflows/unit.yml
@@ -49,7 +49,7 @@ jobs:
           release-assets.githubusercontent.com:443
 
     - name: Checkout
-      uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
     - name: Use Python ${{ matrix.python }}
       uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
       with:
diff --git a/CHANGELOG.md b/CHANGELOG.md
index b817ff60..14e609c4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,14 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.10.1](https://github.com/GoogleCloudPlatform/functions-framework-python/compare/v3.10.0...v3.10.1) (2026-02-17)
+
+
+### Bug Fixes
+
+* Correct cloudevents dependency to allow 1.11.0 ([#405](https://github.com/GoogleCloudPlatform/functions-framework-python/issues/405)) ([8d74a7b](https://github.com/GoogleCloudPlatform/functions-framework-python/commit/8d74a7b9ecead58df77208d6e4717419a9aa9447))
+* pin lint tool versions to avoid surprise breakages ([#413](https://github.com/GoogleCloudPlatform/functions-framework-python/issues/413)) ([43e63f6](https://github.com/GoogleCloudPlatform/functions-framework-python/commit/43e63f6f847d89eeb018add028fb6222f2fac38c))
+
 ## [3.10.0](https://github.com/GoogleCloudPlatform/functions-framework-python/compare/v3.9.2...v3.10.0) (2025-11-10)
 
 
diff --git a/pyproject.toml b/pyproject.toml
index b187260f..972e7e52 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "functions-framework"
-version = "3.10.0"
+version = "3.10.1"
 description = "An open source FaaS (Function as a service) framework for writing portable Python functions -- brought to you by the Google Cloud Functions team."
 readme = "README.md"
 requires-python = ">=3.7, <4"
@@ -27,7 +27,7 @@ dependencies = [
   "click>=7.0,<9.0",
   "watchdog>=1.0.0",
   "gunicorn>=22.0.0; platform_system!='Windows'",
-  "cloudevents>=1.12.0,<=1.12.0",                   # Must support python 3.7
+  "cloudevents>=1.11.0,<=1.12.0",                   # Must support python 3.8
   "Werkzeug>=0.14,<4.0.0",
   "starlette>=0.37.0,<1.0.0; python_version>='3.8'",
   "uvicorn>=0.18.0,<1.0.0; python_version>='3.8'",
diff --git a/setup.py b/setup.py
index 28d0ea11..db6479ea 100644
--- a/setup.py
+++ b/setup.py
@@ -25,7 +25,7 @@
 
 setup(
     name="functions-framework",
-    version="3.10.0",
+    version="3.10.1",
     description="An open source FaaS (Function as a service) framework for writing portable Python functions -- brought to you by the Google Cloud Functions team.",
     long_description=long_description,
     long_description_content_type="text/markdown",
diff --git a/tox.ini b/tox.ini
index 2e36e689..6b866c51 100644
--- a/tox.ini
+++ b/tox.ini
@@ -34,10 +34,10 @@ commands = pytest {env:PYTESTARGS} {posargs}
 [testenv:lint]
 basepython=python3
 deps =
-    black
+    black>=25,<26
     twine
-    isort
-    mypy
+    isort>=5,<6
+    mypy>=1,<2
     build
 commands =
     black --check src tests conftest.py --exclude tests/test_functions/background_load_error/main.py