diff --git a/.github/actions/setup-node/action.yml b/.github/actions/setup-node/action.yml
index 664be70..48fb3e9 100644
--- a/.github/actions/setup-node/action.yml
+++ b/.github/actions/setup-node/action.yml
@@ -4,12 +4,12 @@ runs:
   using: "composite"
   steps:
     - name: Install pnpm
-      uses: pnpm/action-setup@v4
+      uses: pnpm/action-setup@v4.0.0
       with:
         version: 10.8.1
 
     - name: Setup Node.js 20.12.0
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v4.0.0
       with:
         node-version: 20.12.0
         cache: pnpm
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 20a0427..b25302c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5.0.0
 
       - name: Setup Node & pnpm
         uses: ./.github/actions/setup-node
diff --git a/.github/workflows/update-dependencies.yml b/.github/workflows/update-dependencies.yml
index 4b3b026..3f0c38a 100644
--- a/.github/workflows/update-dependencies.yml
+++ b/.github/workflows/update-dependencies.yml
@@ -18,7 +18,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5.0.0
 
       - name: Setup Node & pnpm
         uses: ./.github/actions/setup-node
@@ -30,7 +30,7 @@ jobs:
         run: pnpm up --latest --no-frozen-lockfile
 
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v7.0.0
         with:
           commit-message: 'chore(deps): update all dependencies'
           title: 'chore(deps): update all dependencies'
diff --git a/.github/workflows/vrt.yml b/.github/workflows/vrt.yml
index bc8c3a9..e946e9f 100644
--- a/.github/workflows/vrt.yml
+++ b/.github/workflows/vrt.yml
@@ -21,7 +21,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           fetch-depth: 0
           persist-credentials: false