diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index eb09100..8fdfacb 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -11,10 +11,10 @@ jobs:
   test-unit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@v8.1.0
         with:
           enable-cache: true
 
@@ -31,7 +31,7 @@ jobs:
         runner: [ubuntu-latest, ubuntu-24.04-arm]
     runs-on: ${{ matrix.runner }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       - name: Test with-connect action (single line)
         uses: ./
@@ -61,7 +61,7 @@ jobs:
   test-action-start-only:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       - name: Start Connect (no command)
         id: start-connect
@@ -115,10 +115,10 @@ jobs:
   test-cli:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@v8.1.0
 
       - name: Create license file
         run: echo "${{ secrets.CONNECT_LICENSE }}" > rstudio-connect.lic
diff --git a/action.yml b/action.yml
index d23f0e1..fd7caab 100644
--- a/action.yml
+++ b/action.yml
@@ -47,7 +47,7 @@ runs:
   using: composite
   steps:
     - name: Set up uv
-      uses: astral-sh/setup-uv@v7
+      uses: astral-sh/setup-uv@v8.1.0
 
     - name: Install with-connect
       shell: bash