diff --git a/.github/workflows/conformance-tests.yml b/.github/workflows/conformance-tests.yml
index cdd5424..6633449 100644
--- a/.github/workflows/conformance-tests.yml
+++ b/.github/workflows/conformance-tests.yml
@@ -38,30 +38,33 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out conformance repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
         with:
           path: conformance
 
       - name: Check out samples repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
         with:
           repository: Universal-Commerce-Protocol/samples
           path: samples
 
       - name: Check out SDK repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
         with:
           repository: Universal-Commerce-Protocol/python-sdk
           path: python-sdk
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
         with:
           prune-cache: false
 
       - name: Set up Python
         run: uv python install 3.12
 
+      - name: Validate published SDK dependency
+        run: uv sync --directory conformance/ --no-sources --no-install-project
+
       - name: Sync dependencies
         run: |
           uv sync --directory python-sdk/
diff --git a/pyproject.toml b/pyproject.toml
index 2270208..1eca52d 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -11,7 +11,7 @@ dependencies = [
     "absl-py>=1.0.0",
     "httpx>=0.26.0",
     "pydantic>=2.12.0",
-    "ucp-sdk==0.3.0",
+    "ucp-sdk==0.4.4",
     "fastapi>=0.109.0",
     "uvicorn[standard]>=0.38.0",
     "ruff>=0.14.11",