diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index ab58ca9..46eddb1 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -11,7 +11,7 @@ jobs:
       - name: Install Rust and rust toolchain
         uses: actions-rs/toolchain@v1
         with:
-          toolchain: stable
+          toolchain: "1.76"
           override: true
 
       - name: Install Wabt (wat2wasm)
@@ -21,7 +21,7 @@ jobs:
           sudo cp wabt-1.0.29/bin/wat2wasm /usr/local/bin
 
       - name: Check cargo cache
-        uses: actions/cache@v2
+        uses: actions/cache@v4
         with:
           path: |
             ~/.cargo/registry
diff --git a/packages/vm/Cargo.toml b/packages/vm/Cargo.toml
index 7aa1f43..308878a 100644
--- a/packages/vm/Cargo.toml
+++ b/packages/vm/Cargo.toml
@@ -12,11 +12,20 @@ version = "0.3.1"
 assert_matches = "1.3.0"
 clru = "0.2.0"
 hex = "0.4"
-owasm-crypto = {path = "../crypto", version = "0.3.1"}
+owasm-crypto = { path = "../crypto", version = "0.3.1" }
 sha2 = "0.9.1"
-tempfile = "3.1.0"
+tempfile = ">=3.1.0, <3.20"
+home = ">=0.5, <0.5.9"
+rayon = ">=1.0, <1.12"
+rayon-core = ">=1.0, <1.13"
+backtrace = ">=0.3, <0.3.74"
+addr2line = ">=0.17, <0.22"
 wasm-instrument = { version = "0.4.0", default-features = false, features = [
-  "sign_ext"
+  "sign_ext",
+] }
+wasmer = { version = "2.3.0", default-features = false, features = [
+  "singlepass",
+  "compiler",
+  "universal",
 ] }
-wasmer = {version = "2.3.0", default-features = false, features = ["singlepass", "compiler", "universal"]}
 wasmer-middlewares = "2.3.0"
diff --git a/packages/vm/src/calls.rs b/packages/vm/src/calls.rs
index afd1051..0e497c1 100644
--- a/packages/vm/src/calls.rs
+++ b/packages/vm/src/calls.rs
@@ -31,7 +31,7 @@ where
     let function = instance
         .exports
         .get_function(entry)
-        .unwrap()
+        .map_err(|_| Error::BadEntrySignatureError)?
         .native::<(), ()>()
         .map_err(|_| Error::BadEntrySignatureError)?;