diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2bd849b..99503c9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
       - name: Run markdownlint-cli
         uses: nosborn/github-action-markdown-cli@v3.5.0
         with:
@@ -34,7 +34,7 @@ jobs:
         dotnet-version:
           - '9.0.x'
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - name: Setup dotnet ${{ matrix.dotnet-version }}
         uses: actions/setup-dotnet@v5
         with:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index aa61076..326a667 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -24,7 +24,7 @@ jobs:
     needs: wait-for-ci
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - name: Setup dotnet
         uses: actions/setup-dotnet@v5
         with:
diff --git a/.github/workflows/sync-test-fixtures.yml b/.github/workflows/sync-test-fixtures.yml
index db0fd8f..bfbb24c 100644
--- a/.github/workflows/sync-test-fixtures.yml
+++ b/.github/workflows/sync-test-fixtures.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6.0.0
+        uses: actions/checkout@v6.0.2
       - name: Sync fixtures
         id: sync
         run: |
@@ -20,7 +20,7 @@ jobs:
           rsync -a --delete "$TMP_DIR/dnsimple-developer-main/fixtures/v2/" src/dnsimple-test/fixtures/v2/
           echo "now=$(date +'%Y-%m-%d %H:%M:%S')" >> "$GITHUB_OUTPUT"
       - name: Create PR with synced fixtures
-        uses: peter-evans/create-pull-request@v8.0.0
+        uses: peter-evans/create-pull-request@v8.1.1
         with:
           sign-commits: true
           add-paths: src/dnsimple-test/fixtures/v2/