diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 000000000..fc9f8550e
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,7 @@
+
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"      # Location of your workflow files
+    schedule:
+      interval: "weekly"  # Options: daily, weekly, monthly
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index e99b14397..706e76fed 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -1,3 +1,5 @@
+permissions:
+  contents: read
 on:
   push:
     paths:
@@ -16,6 +18,8 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Set up Python
         uses: actions/setup-python@v5
@@ -41,6 +45,8 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Set up Python
         uses: actions/setup-python@v5
@@ -67,6 +73,8 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Set up Python
         uses: actions/setup-python@v5
@@ -119,7 +127,7 @@ jobs:
           echo "SDIST_DIR=$extractedDir" | Out-File -FilePath $env:GITHUB_ENV -Append
 
       - name: Build basemap wheels from sdist
-        uses: pypa/cibuildwheel@v2.22.0
+        uses: pypa/cibuildwheel@ee63bf16da6cddfb925f542f2c7b59ad50e93969 # v2.22.0
         env:
           CIBW_ARCHS: "native"
           CIBW_BUILD: "cp39* cp310* cp311* cp312* cp313*"
@@ -182,6 +190,8 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Set up Python
         uses: actions/setup-python@v5
@@ -252,7 +262,7 @@ jobs:
       id-token: write
     steps:
       - name: Deploy github-pages
-        uses: actions/deploy-pages@v3
+        uses: actions/deploy-pages@v4
         id: deployment
 
   upload:
@@ -270,7 +280,7 @@ jobs:
           merge-multiple: true
 
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4
         with:
           password: ${{ secrets.PYPI_TOKEN }}
           repository-url: ${{ secrets.PYPI_REPOSITORY_URL }}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 62bf9a58d..a3599f28b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,8 @@ https://keepachangelog.com/en/1.0.0/
 https://semver.org/spec/v2.0.0.html
 
 
+## [Unreleased]
+
 ## [2.0.0] - 2025-06-13
 
 ### Added
diff --git a/src/_geoslib.pyx b/src/_geoslib.pyx
index bc050cc45..2aab76867 100644
--- a/src/_geoslib.pyx
+++ b/src/_geoslib.pyx
@@ -2,7 +2,7 @@ import sys
 import numpy
 cimport numpy as cnp
 
-__version__ = "2.0.0"
+__version__ = "2.1.0.dev0"
 
 
 # Need some Python C-API functions for strings.
diff --git a/src/mpl_toolkits/basemap/__init__.py b/src/mpl_toolkits/basemap/__init__.py
index 45a925434..46458b95b 100644
--- a/src/mpl_toolkits/basemap/__init__.py
+++ b/src/mpl_toolkits/basemap/__init__.py
@@ -48,7 +48,7 @@
 from . proj import Proj
 
 
-__version__ = "2.0.0"
+__version__ = "2.1.0.dev0"
 
 # basemap data files now installed in lib/matplotlib/toolkits/basemap/data
 # check to see if environment variable BASEMAPDATA set to a directory,