diff --git a/.github/workflows/publish-server.yaml b/.github/workflows/publish-server.yaml
index ff1b14cf..f4788405 100644
--- a/.github/workflows/publish-server.yaml
+++ b/.github/workflows/publish-server.yaml
@@ -19,18 +19,18 @@ jobs:
       publishedPackages: ${{ steps.changesets.outputs.publishedPackages }}
     steps:
       # ...
-      - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v2
+      - uses: actions/checkout@v4.3.1
+      - uses: oven-sh/setup-bun@v2.2.0
       - name: Install Deno
-        uses: denoland/setup-deno@v2
+        uses: denoland/setup-deno@v2.0.4
         with:
-          deno-version: v2.x
+          deno-version: 2.8.3
       # run any `bun` or `bunx` command
       - run: bun install
       - run: bun test
       - name: Create Release Pull Request
         id: changesets
-        uses: changesets/action@v1
+        uses: changesets/action@v1.9.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
@@ -45,10 +45,10 @@ jobs:
     if: needs.release.outputs.published == 'true'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v2
+      - uses: actions/checkout@v4.3.1
+      - uses: oven-sh/setup-bun@v2.2.0
       - name: Setup NPM
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v4.4.0
         with:
           registry-url: 'https://registry.npmjs.org/'
           scope: '@progsoc'
@@ -79,12 +79,12 @@ jobs:
       NODE_ENV: production
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.3.1
 
       - name: Set up Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.2.0
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v4.4.0
       - name: Install Dependencies
         run: bun install --frozen-lockfile
       - name: Build
@@ -92,7 +92,7 @@ jobs:
 
       - name: Docker Meta Release
         id: meta-release
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v5.10.0
         with:
           images: ${{ env.IMAGE }}
           tags: |
@@ -104,7 +104,7 @@ jobs:
             type=sha
       - name: Docker Meta Release (runtimes)
         id: meta-release-runtimes
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v5.10.0
         with:
           images: ${{ env.IMAGE }}
           flavor: |
@@ -116,20 +116,20 @@ jobs:
             type=semver,pattern={{major}}.{{minor}},value=${{ matrix.package.version }}
             type=sha
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v3.7.0
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v3.12.0
 
       - name: Docker Login
-        uses: docker/login-action@v3
+        uses: docker/login-action@v3.7.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and Push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v6.19.2
         with:
           tags: ${{ steps.meta-release.outputs.tags }}
           push: true
@@ -139,7 +139,7 @@ jobs:
           cache-from: type=registry,ref=${{ env.IMAGE }}:latest
           platforms: linux/amd64,linux/arm64
       - name: Build and Push Runtimes
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v6.19.2
         with:
           tags: ${{ steps.meta-release-runtimes.outputs.tags }}
           push: true
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 2b33c124..64044480 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -11,12 +11,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # ...
-      - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v2
+      - uses: actions/checkout@v4.3.1
+      - uses: oven-sh/setup-bun@v2.2.0
       - name: Install Deno
-        uses: denoland/setup-deno@v2
+        uses: denoland/setup-deno@v2.0.4
         with:
-          deno-version: v2.x
+          deno-version: 2.8.3
       # run any `bun` or `bunx` command
       - run: bun install
       - run: cd server && bun test
@@ -24,8 +24,8 @@ jobs:
     name: Test Svelte
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v2
+      - uses: actions/checkout@v4.3.1
+      - uses: oven-sh/setup-bun@v2.2.0
       - name: Install Deps
         run: bun install
       - name: Build Types