diff --git a/.github/workflows/deploy-website.yml b/.github/workflows/deploy-website.yml
index 895da83..25bf13c 100644
--- a/.github/workflows/deploy-website.yml
+++ b/.github/workflows/deploy-website.yml
@@ -18,7 +18,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       - name: Use Node.js 20.x
         uses: actions/setup-node@v6
@@ -41,7 +41,7 @@ jobs:
         run: npm run build
 
       - name: Upload Pages artifact
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@v5
         with:
           path: website/build/website
 
@@ -54,4 +54,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5
diff --git a/.github/workflows/node.js.yml b/.github/workflows/node.js.yml
index 833f0f3..c6cf9ec 100644
--- a/.github/workflows/node.js.yml
+++ b/.github/workflows/node.js.yml
@@ -13,7 +13,7 @@ jobs:
   ci:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
     - name: Use Node.js 20.x
       uses: actions/setup-node@v6
       with:
@@ -29,7 +29,7 @@ jobs:
         provenance: true
     - name: Create tag
       if: steps.publish.outputs.type
-      uses: actions/github-script@v8
+      uses: actions/github-script@v9
       with:
         script: |
           github.rest.git.createRef({
@@ -51,7 +51,7 @@ jobs:
     outputs:
       version: ${{ steps.playwright-version.outputs.version }}
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
     - name: Get Playwright version from package-lock.json
       id: playwright-version
       run: |
@@ -64,7 +64,7 @@ jobs:
     container:
       image: mcr.microsoft.com/playwright:v${{ needs.get-playwright-version.outputs.version }}-noble
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
     - name: Install dependencies
       run: npm ci
     - name: Build maquette
@@ -78,7 +78,7 @@ jobs:
       working-directory: browser-tests
       run: npm test
     - name: Upload Playwright report
-      uses: actions/upload-artifact@v6
+      uses: actions/upload-artifact@v7
       if: ${{ !cancelled() }}
       with:
         name: playwright-report