@@ -43,12 +43,12 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2 https://github.com/actions/checkout/releases/tag/v6.0.2
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup Python environment
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78  # v7.6.0 https://github.com/astral-sh/setup-uv/releases/tag/v7.6.0
 
       - name: Install bump-my-version
         run: uv tool install bump-my-version
@@ -66,7 +66,7 @@ jobs:
 
       - name: Update changelog
         id: changelog
-        uses: release-flow/keep-a-changelog-action@v2
+        uses: release-flow/keep-a-changelog-action@74931dec7ecdbfc8e38ac9ae7e8dd84c08db2f32  # v3.0.0 https://github.com/release-flow/keep-a-changelog-action/releases/tag/v3.0.0
         with:
           command: bump
           version: ${{ inputs.bump-type }}
@@ -75,14 +75,14 @@ jobs:
 
       - name: Query changelog for release notes
         id: query_changelog
-        uses: release-flow/keep-a-changelog-action@v2
+        uses: release-flow/keep-a-changelog-action@74931dec7ecdbfc8e38ac9ae7e8dd84c08db2f32  # v3.0.0 https://github.com/release-flow/keep-a-changelog-action/releases/tag/v3.0.0
         with:
           command: query
           version: latest
 
       - name: Create Pull Request
         id: create_pr
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0 https://github.com/peter-evans/create-pull-request/releases/tag/v8.1.0
         with:
           commit-message: "chore: bump version to ${{ steps.bump.outputs.current-version }} (${{ inputs.bump-type }} bump)"
           title: "Bump version to ${{ steps.bump.outputs.current-version }} (${{ inputs.bump-type }} bump)"