diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 01ac48f..621b6f8 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -30,6 +30,8 @@ jobs:
           ruby-version: ruby
 
       - run: bundle install
+        env:
+          BUNDLE_FROZEN: true
 
       # zizmor complains that 'v1' is a ref that can be provided by both the branch and tag namespaces.
       # specify that we want the v1 branch.
diff --git a/.github/workflows/rubocop.yml b/.github/workflows/rubocop.yml
index 7564f1c..6ad4527 100644
--- a/.github/workflows/rubocop.yml
+++ b/.github/workflows/rubocop.yml
@@ -23,4 +23,6 @@ jobs:
           ruby-version: 3.4
 
       - run: bundle install
+        env:
+          BUNDLE_FROZEN: true
       - run: bundle exec rake -t rubocop
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index d116217..db9ef9e 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -38,4 +38,6 @@ jobs:
           ruby-version: ${{ matrix.version }}
 
       - run: bundle install
+        env:
+          BUNDLE_FROZEN: true
       - run: bundle exec rake -t spec
diff --git a/Gemfile.lock b/Gemfile.lock
index f979ffb..bc989f8 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -14,6 +14,7 @@ GEM
       public_suffix (>= 2.0.2, < 8.0)
     ast (2.4.3)
     bigdecimal (3.3.1)
+    bigdecimal (3.3.1-java)
     connection_pool (3.0.2)
     crack (1.0.1)
       bigdecimal
@@ -26,6 +27,7 @@ GEM
     ffi (1.17.2-arm-linux-gnu)
     ffi (1.17.2-arm-linux-musl)
     ffi (1.17.2-arm64-darwin)
+    ffi (1.17.2-java)
     ffi (1.17.2-x86-linux-gnu)
     ffi (1.17.2-x86-linux-musl)
     ffi (1.17.2-x86_64-darwin)
@@ -44,6 +46,7 @@ GEM
       domain_name (~> 0.5)
     http-form_data (2.3.0)
     json (2.18.0)
+    json (2.18.0-java)
     language_server-protocol (3.17.0.5)
     lint_roller (1.1.0)
     llhttp-ffi (0.5.1)
@@ -61,6 +64,7 @@ GEM
     prism (1.8.0)
     public_suffix (7.0.0)
     racc (1.8.1)
+    racc (1.8.1-java)
     rainbow (3.1.1)
     rake (13.3.1)
     regexp_parser (2.11.3)
@@ -122,6 +126,7 @@ PLATFORMS
   arm-linux-gnu
   arm-linux-musl
   arm64-darwin
+  java
   ruby
   x86-linux-gnu
   x86-linux-musl
diff --git a/dev-bin/release.sh b/dev-bin/release.sh
index f3bdcf0..13a31ec 100755
--- a/dev-bin/release.sh
+++ b/dev-bin/release.sh
@@ -32,6 +32,7 @@ fi
 
 check_command perl
 check_command rake
+check_command bundle
 
 # Check that we're not on the main branch
 current_branch=$(git branch --show-current)
@@ -84,6 +85,9 @@ fi
 
 perl -pi -e "s/(?<=VERSION = \').+?(?=\')/$version/g" lib/minfraud/version.rb
 
+# Update version in Gemfile.lock.
+bundle install
+
 echo $"Test results:"
 
 rake