diff --git a/.github/workflows/deploy-storybook.yaml b/.github/workflows/deploy-storybook.yaml
index 808f71f..83ea3e0 100644
--- a/.github/workflows/deploy-storybook.yaml
+++ b/.github/workflows/deploy-storybook.yaml
@@ -21,39 +21,39 @@ jobs:
         python-version: ["3.12"]
  
     steps:
-    - uses: actions/checkout@v6
-
-    - name: Setup pnpm (v5.0.0)
-      uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320
-      with:
-        run_install: |
-          args: [ --force ]
-
-    - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v6
-      with:
-        python-version: ${{ matrix.python-version }}
-
-    - name: Install server dependencies
-      run: |
-        python -m pip install --upgrade pip
-        if [ -f server/requirements.txt ]; then pip install -r server/requirements.txt; fi
-
-    - name: Generate OpenAPI JSON
-      run: |
-        PYTHONPATH=server python server/davidia/generate_openapi.py
-
-    - name: Set Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v6
-      with:
-        node-version: ${{ matrix.node-version }}
-        cache: pnpm
-
-    - name: Build and publish storybook (v1.0.4)
-      id: build-publish
-      uses: bitovi/github-actions-storybook-to-github-pages@ddd9d35f670cceedd2bfc444be681001b0709730
-      with:
-        checkout: false
-        path: storybook/storybook-static
-        install_command: echo Already done
-        build_command: pnpm run docs && pnpm build:storybook
+      - uses: actions/checkout@v7
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
+        with:
+          run_install: |
+            args: [ --force ]
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v6
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install server dependencies
+        run: |
+          python -m pip install --upgrade pip
+          if [ -f server/requirements.txt ]; then pip install -r server/requirements.txt; fi
+
+      - name: Generate OpenAPI JSON
+        run: |
+          PYTHONPATH=server python server/davidia/generate_openapi.py
+
+      - name: Set Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@v6
+        with:
+          node-version: ${{ matrix.node-version }}
+          cache: pnpm
+
+      - name: Build and publish storybook
+        id: build-publish
+        uses: bitovi/github-actions-storybook-to-github-pages@ddd9d35f670cceedd2bfc444be681001b0709730 # v1.0.4
+        with:
+          checkout: false
+          path: storybook/storybook-static
+          install_command: echo Already done
+          build_command: pnpm run docs && pnpm build:storybook
diff --git a/.github/workflows/npm-publish.yaml b/.github/workflows/npm-publish.yaml
index 069467e..22a3e92 100644
--- a/.github/workflows/npm-publish.yaml
+++ b/.github/workflows/npm-publish.yaml
@@ -20,10 +20,10 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
-      - name: Setup pnpm (v5.0.0)
-        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320
+      - name: Setup pnpm
+        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
         with:
           run_install: |
             args: [ --force ]
diff --git a/.github/workflows/python-package.yml b/.github/workflows/python-package.yml
index 3599d60..e26ac42 100644
--- a/.github/workflows/python-package.yml
+++ b/.github/workflows/python-package.yml
@@ -20,10 +20,10 @@ jobs:
         python-version: ["3.12"]
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
-      - name: Setup pnpm (v5.0.0)
-        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320
+      - name: Setup pnpm
+        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
         with:
           run_install: |
             args: [ --force ]
@@ -91,5 +91,5 @@ jobs:
       - name: Display structure of downloaded files
         run: ls -R
       # Publish to PyPI using trusted publishing
-      - name: Publish to PyPI (v1.14.0)
-        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0