diff --git a/composer.json b/composer.json
index d01445f..fffded4 100644
--- a/composer.json
+++ b/composer.json
@@ -10,15 +10,15 @@
         "doctrine/orm": "^3.6",
         "psr/clock": "^1.0",
         "psr/log": "^3.0",
-        "symfony/clock": "8.0.*",
-        "symfony/config": "8.0.*",
-        "symfony/dependency-injection": "8.0.*",
-        "symfony/framework-bundle": "8.0.*",
-        "symfony/http-foundation": "8.0.*",
-        "symfony/http-kernel": "8.0.*",
-        "symfony/security-core": "8.0.*",
+        "symfony/clock": "^8.0",
+        "symfony/config": "^8.0",
+        "symfony/dependency-injection": "^8.0",
+        "symfony/framework-bundle": "^8.0",
+        "symfony/http-foundation": "^8.0",
+        "symfony/http-kernel": "^8.0",
+        "symfony/security-core": "^8.0",
         "symfony/translation-contracts": "^3.5",
-        "symfony/uid": "8.0.*"
+        "symfony/uid": "^8.0"
     },
     "require-dev": {
         "phpunit/phpunit": "^13.1",
@@ -32,8 +32,8 @@
         "rector/rector": "^2.4",
         "deptrac/deptrac": "^4.6",
         "infection/infection": "^0.33",
-        "symfony/cache": "^7.2",
-        "symfony/security-bundle": "8.0.*"
+        "symfony/cache": "^8.0",
+        "symfony/security-bundle": "^8.0"
     },
     "autoload": {
         "psr-4": { "WeDevelop\\AuditLog\\": "src/" }
diff --git a/tests/Functional/TestKernel.php b/tests/Functional/TestKernel.php
index 79df655..ddb4e53 100644
--- a/tests/Functional/TestKernel.php
+++ b/tests/Functional/TestKernel.php
@@ -11,6 +11,7 @@
 use Symfony\Bundle\FrameworkBundle\Kernel\MicroKernelTrait;
 use Symfony\Bundle\SecurityBundle\SecurityBundle;
 use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
+use Symfony\Component\HttpKernel\Bundle\Bundle;
 use Symfony\Component\HttpKernel\Kernel;
 use WeDevelop\AuditLog\AuditLogBundle;
 use WeDevelop\AuditLog\Reading\RecordReader;
@@ -23,6 +24,13 @@ final class TestKernel extends Kernel
 {
     use MicroKernelTrait;
 
+    /**
+     * Symfony 8.1 deprecated HttpKernel's BundleInterface, which the inherited
+     * return type names. Narrow to the concrete Bundle base class our test
+     * bundles all extend — accurate, deprecation-free, and valid on 8.0 and 8.1.
+     *
+     * @return iterable<Bundle>
+     */
     #[Override]
     public function registerBundles(): iterable
     {