diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index dc8f3d08..d99ac041 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -18,15 +18,15 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 0
       - name: Enable Corepack
         run: corepack enable
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
-          node-version: 24
+          node-version: 24.18.0
           registry-url: "https://registry.npmjs.org"
       - name: Install dependencies
         run: yarn install --immutable
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 3d8e37ca..27bc596f 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -31,7 +31,7 @@ jobs:
       code: ${{ steps.filter.outputs.code }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - name: Detect docs-only changes
         id: filter
         uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
@@ -67,12 +67,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Setup Node.js
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
-          node-version: 24
+          node-version: 24.18.0
 
       - name: Enable Corepack and setup Yarn v4
         run: |
@@ -81,7 +81,7 @@ jobs:
 
       - name: Cache dependencies
         id: cache-depends
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5
+        uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0
         with:
           path: "**/node_modules"
           key: os-ubuntu-latest-node24-${{ hashFiles('yarn.lock') }}
@@ -102,12 +102,12 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Setup Node.js
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
-          node-version: 24
+          node-version: 24.18.0
 
       - name: Enable Corepack and setup Yarn v4
         run: |
@@ -116,7 +116,7 @@ jobs:
 
       - name: Cache dependencies
         id: cache-depends
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5
+        uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0
         with:
           path: "**/node_modules"
           key: os-${{ matrix.os }}-node24-${{ hashFiles('yarn.lock') }}
@@ -161,7 +161,7 @@ jobs:
       issues: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Ensure ci-failure label
         env:
diff --git a/packages/@d-zero/backlog-projects/package.json b/packages/@d-zero/backlog-projects/package.json
index 54b0164c..6065a65d 100644
--- a/packages/@d-zero/backlog-projects/package.json
+++ b/packages/@d-zero/backlog-projects/package.json
@@ -8,7 +8,7 @@
 		"access": "public"
 	},
 	"engines": {
-		"node": ">=22.1.0"
+		"node": "v26.4.0"
 	},
 	"type": "module",
 	"bin": "./dist/cli.js",