diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index eaeb76fda..eb7a8bafe 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -92,6 +92,8 @@ jobs:
           php-version: '8.3'
       - name: Setup Node, NPM
         uses: ./.github/actions/setup-node
+      - name: Run lockfile checks
+        run: make -C SETUP/ci lockfile_checks
       - name: Run security checks
         run: make -C SETUP/ci security_checks
       - name: Run charsuite checks
diff --git a/SETUP/ci/Makefile b/SETUP/ci/Makefile
index 56531ee8b..dfa374266 100644
--- a/SETUP/ci/Makefile
+++ b/SETUP/ci/Makefile
@@ -2,7 +2,12 @@
 
 SELF_DIR := $(dir $(lastword $(MAKEFILE_LIST)))
 
-all: lint code_style static_checks security_checks best_practice_checks
+all: lockfile_checks lint code_style static_checks security_checks best_practice_checks
+
+#----------------------------------------------------------------------------
+# Check lockfiles are up to date
+lockfile_checks:
+	cd $(SELF_DIR)../../ && composer validate
 
 #----------------------------------------------------------------------------
 # Security checks
diff --git a/composer.json b/composer.json
index 699d4014f..0f2851bfa 100644
--- a/composer.json
+++ b/composer.json
@@ -6,7 +6,7 @@
     "minimum-stability": "stable",
     "require": {
         "ezyang/htmlpurifier" : "v4.*",
-        "erusev/parsedown": "1.8.0",
+        "erusev/parsedown": "^1.8.0",
         "erusev/parsedown-extra": "0.9.0",
         "voku/portable-utf8": "^6.1.1",
         "phpmailer/phpmailer": "^7.0",
diff --git a/composer.lock b/composer.lock
index 1befe8fca..0cfdd28ab 100644
--- a/composer.lock
+++ b/composer.lock
@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "92914f25061fee0b152f55768b2fba36",
+    "content-hash": "ab09feba1f93ec5654cdcd7b48edb2d0",
     "packages": [
         {
             "name": "erusev/parsedown",