diff --git a/.github/workflows/build-and-test.yml b/.github/workflows/build-and-test.yml
index 26f45b80..3cdfc10f 100644
--- a/.github/workflows/build-and-test.yml
+++ b/.github/workflows/build-and-test.yml
@@ -19,10 +19,10 @@ jobs:
       checks: write
       statuses: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.3
 
       - name: Setup node 24
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v6.4.0
         with:
           node-version: 24.11.1
 
@@ -58,7 +58,7 @@ jobs:
 
       # If index.js was different than expected, upload the expected version as an artifact
       - name: Upload dist as artifact if differences detected
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v5.0.0
         if: ${{ failure() && steps.diff.conclusion == 'failure' }}
         with:
           name: dist
@@ -100,10 +100,10 @@ jobs:
       contents: read
       id-token: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.3
 
       - name: Install Octopus CLI
-        uses: OctopusDeploy/install-octopus-cli-action@v3
+        uses: OctopusDeploy/install-octopus-cli-action@v3.1.4
 
       - name: Test login with API Key
         id: api_key
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 19650fd2..e23c318d 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -34,11 +34,11 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v6
+      uses: actions/checkout@v6.0.3
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v4
+      uses: github/codeql-action/init@v4.36.2
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -51,9 +51,9 @@ jobs:
     # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v4
+      uses: github/codeql-action/autobuild@v4.36.2
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v4
+      uses: github/codeql-action/analyze@v4.36.2
       with:
         category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/conventional-commit-pr-title.yml b/.github/workflows/conventional-commit-pr-title.yml
index 1bd683f9..cf0b994c 100644
--- a/.github/workflows/conventional-commit-pr-title.yml
+++ b/.github/workflows/conventional-commit-pr-title.yml
@@ -14,6 +14,6 @@ jobs:
     permissions:
       pull-requests: read
     steps:
-      - uses: amannn/action-semantic-pull-request@v6
+      - uses: amannn/action-semantic-pull-request@v6.1.1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
\ No newline at end of file
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 64138f3c..458c2f88 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -15,7 +15,7 @@ jobs:
       contents: write # Needed to tag repo and create releases
       pull-requests: write # Needed to add comments to pull requests on release
     steps:
-      - uses: google-github-actions/release-please-action@v3
+      - uses: google-github-actions/release-please-action@v3.7.13
         id: release
         with:
           package-name: ${{env.ACTION_NAME}}
@@ -23,12 +23,12 @@ jobs:
           token: ${{ secrets.GITHUB_TOKEN }}
           command: github-release
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v3.6.0
         if: ${{ steps.release.outputs.release_created }}
 
       - name: Tag minor version
         if: ${{ steps.release.outputs.release_created }}
-        uses: richardsimko/update-tag@v1
+        uses: richardsimko/update-tag@v1.1.6
         with:
           tag_name: v${{ steps.release.outputs.major }}.${{ steps.release.outputs.minor }}
         env:
@@ -36,7 +36,7 @@ jobs:
 
       - name: Tag major version
         if: ${{ steps.release.outputs.release_created }}
-        uses: richardsimko/update-tag@v1
+        uses: richardsimko/update-tag@v1.1.6
         with:
           tag_name: v${{ steps.release.outputs.major }}
         env:
@@ -48,7 +48,7 @@ jobs:
       - release-please-release
     steps:
       - id: release-pr
-        uses: google-github-actions/release-please-action@v3
+        uses: google-github-actions/release-please-action@v3.7.13
         with:
           token: ${{ secrets.CHANGESETS_GITHUB_TOKEN }}
           release-type: node
diff --git a/.github/workflows/test-login.yml b/.github/workflows/test-login.yml
index 3a2808df..bbb56896 100644
--- a/.github/workflows/test-login.yml
+++ b/.github/workflows/test-login.yml
@@ -20,10 +20,10 @@ jobs:
     runs-on: ubuntu-latest
     name: Test login to Octopus
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.3
 
       - name: Install Octopus CLI
-        uses: OctopusDeploy/install-octopus-cli-action@v3
+        uses: OctopusDeploy/install-octopus-cli-action@v3.1.4
 
       - name: Login to Octopus using OIDC
         uses: ./
diff --git a/.github/workflows/update-dependencies.yml b/.github/workflows/update-dependencies.yml
index c6db7a53..e6f5ccbf 100644
--- a/.github/workflows/update-dependencies.yml
+++ b/.github/workflows/update-dependencies.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.3
 
       - name: Self-hosted Renovate
         uses: renovatebot/github-action@f9c81dddc9b589e4e6ae0326d1e36f6bc415d230 # v39.2.4