diff --git a/.github/workflows/deploy-storybook.yaml b/.github/workflows/deploy-storybook.yaml
index 1066659..808f71f 100644
--- a/.github/workflows/deploy-storybook.yaml
+++ b/.github/workflows/deploy-storybook.yaml
@@ -23,7 +23,8 @@ jobs:
     steps:
     - uses: actions/checkout@v6
 
-    - uses: pnpm/action-setup@v4
+    - name: Setup pnpm (v5.0.0)
+      uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320
       with:
         run_install: |
           args: [ --force ]
@@ -48,9 +49,9 @@ jobs:
         node-version: ${{ matrix.node-version }}
         cache: pnpm
 
-    - name: Build and publish
+    - name: Build and publish storybook (v1.0.4)
       id: build-publish
-      uses: bitovi/github-actions-storybook-to-github-pages@v1
+      uses: bitovi/github-actions-storybook-to-github-pages@ddd9d35f670cceedd2bfc444be681001b0709730
       with:
         checkout: false
         path: storybook/storybook-static
diff --git a/.github/workflows/npm-publish.yaml b/.github/workflows/npm-publish.yaml
index 586cb43..069467e 100644
--- a/.github/workflows/npm-publish.yaml
+++ b/.github/workflows/npm-publish.yaml
@@ -22,7 +22,8 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v6
 
-      - uses: pnpm/action-setup@v4
+      - name: Setup pnpm (v5.0.0)
+        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320
         with:
           run_install: |
             args: [ --force ]
diff --git a/.github/workflows/python-package.yml b/.github/workflows/python-package.yml
index c0ff8fe..3c50719 100644
--- a/.github/workflows/python-package.yml
+++ b/.github/workflows/python-package.yml
@@ -22,12 +22,13 @@ jobs:
     steps:
     - uses: actions/checkout@v6
 
-    - uses: pnpm/action-setup@v4
+    - name: Setup pnpm (v5.0.0)
+      uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320
       with:
         run_install: |
           args: [ --force ]
 
-    - name: Set Node.js ${{ matrix.node-version }}
+    - name: Setup Node.js ${{ matrix.node-version }}
       uses: actions/setup-node@v6
       with:
         node-version: ${{ matrix.node-version }}
@@ -86,5 +87,5 @@ jobs:
       # Download sdist and wheel from dist job
       - uses: actions/download-artifact@v7
       # Publish to PyPI using trusted publishing
-      - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+      - name: Publish to PyPI (v1.13.0)
+        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e