diff --git a/.github/renovate/default.json5 b/.github/renovate/default.json5
index 842244f..9344b25 100644
--- a/.github/renovate/default.json5
+++ b/.github/renovate/default.json5
@@ -24,28 +24,28 @@
     enabled: true,
   },
   packageRules: [
-      {
-          matchDatasources: ["docker"],
-          registryUrls: ["quay.io"],
-      },
-      {
-          matchManagers: ["github-actions"],
-          automerge: true,
-          pinDigest: {
-              enabled: false,
-          },
-          matchPackageNames: ["/^nf-core//", "/^seqera/"],
-      },
-      {
-          matchManagers: ["github-actions"],
-          groupName: "GitHub Actions",
-          automerge: true,
-          schedule: ["before 9am"],
-      },
-      {
-          automerge: true,
-          schedule: ["before 9am on Monday"],
-          matchPackageNames: ["/renovate-config-validator/"],
+    {
+      matchDatasources: ["docker"],
+      registryUrls: ["quay.io"],
+    },
+    {
+      matchManagers: ["github-actions"],
+      automerge: true,
+      pinDigest: {
+        enabled: false,
       },
+      matchPackageNames: ["/^nf-core//", "/^seqera/"],
+    },
+    {
+      matchManagers: ["github-actions"],
+      groupName: "GitHub Actions",
+      automerge: true,
+      schedule: ["before 9am"],
+    },
+    {
+      automerge: true,
+      schedule: ["before 9am on Monday"],
+      matchPackageNames: ["/renovate-config-validator/"],
+    },
   ],
 }
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 0815f00..c65cf98 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -14,6 +14,6 @@ jobs:
   pre-commit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
-      - uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5
-      - uses: pre-commit/action@v3.0.1
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5
+      - uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1
diff --git a/.github/workflows/stats.yml b/.github/workflows/stats.yml
index f5d5cc3..a51cdbd 100644
--- a/.github/workflows/stats.yml
+++ b/.github/workflows/stats.yml
@@ -21,8 +21,8 @@ jobs:
     name: Update
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: prefix-dev/setup-pixi@v0.8.1
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: prefix-dev/setup-pixi@ba3bb36eb2066252b2363392b7739741bb777659 # v0.8.1
         with:
           cache: true
           manifest-path: "stats/steampipe/pixi.toml"