diff --git a/.github/workflows/ci-docs.yaml b/.github/workflows/ci-docs.yaml
index 62e569c..ebf45f0 100644
--- a/.github/workflows/ci-docs.yaml
+++ b/.github/workflows/ci-docs.yaml
@@ -13,10 +13,10 @@ jobs:
     timeout-minutes: 10
 
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
     - name: Install uv and setup python
-      uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+      uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
       with:
         activate-environment: true
         python-version: "3.12"
@@ -46,10 +46,10 @@ jobs:
     timeout-minutes: 10
 
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
     - name: Install uv and setup python
-      uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+      uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
       with:
         activate-environment: true
         python-version: "3.12"
@@ -71,10 +71,10 @@ jobs:
     timeout-minutes: 10
 
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
     - name: Install uv and setup python
-      uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+      uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
       with:
         activate-environment: true
         python-version: "3.12"
diff --git a/.github/workflows/ci-examples.yaml b/.github/workflows/ci-examples.yaml
index 63e7474..6db1a06 100644
--- a/.github/workflows/ci-examples.yaml
+++ b/.github/workflows/ci-examples.yaml
@@ -53,9 +53,9 @@ jobs:
       UV_TORCH_BACKEND: cpu
 
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: Install uv and setup python
-      uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+      uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
       with:
         activate-environment: true
         python-version: ${{ matrix.python-version }}
diff --git a/.github/workflows/ci-integrations.yaml b/.github/workflows/ci-integrations.yaml
index c80859f..39a8e86 100644
--- a/.github/workflows/ci-integrations.yaml
+++ b/.github/workflows/ci-integrations.yaml
@@ -30,9 +30,9 @@ jobs:
       UV_TORCH_BACKEND: cpu
 
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: Install uv and setup python
-      uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+      uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
       with:
         activate-environment: true
         python-version: ${{ matrix.python-version }}
diff --git a/.github/workflows/ci-mypy.yaml b/.github/workflows/ci-mypy.yaml
index b35cab0..d69789a 100644
--- a/.github/workflows/ci-mypy.yaml
+++ b/.github/workflows/ci-mypy.yaml
@@ -23,9 +23,9 @@ jobs:
       matrix:
         python-version: ["3.11", "3.13"]
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: Install uv and setup python
-      uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+      uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
       with:
         activate-environment: true
         python-version: ${{ matrix.python-version }}
diff --git a/.github/workflows/ci-unittests.yaml b/.github/workflows/ci-unittests.yaml
index 9b45276..9e6c35f 100644
--- a/.github/workflows/ci-unittests.yaml
+++ b/.github/workflows/ci-unittests.yaml
@@ -30,9 +30,9 @@ jobs:
       UV_TORCH_BACKEND: cpu
 
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: Install uv and setup python
-      uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+      uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
       with:
         activate-environment: true
         python-version: ${{ matrix.python-version }}
diff --git a/.github/workflows/push_wheel.yaml b/.github/workflows/push_wheel.yaml
index 0ca37f9..04013b6 100644
--- a/.github/workflows/push_wheel.yaml
+++ b/.github/workflows/push_wheel.yaml
@@ -20,8 +20,8 @@ jobs:
     permissions:
       id-token: write
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-    - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+    - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
       with:
         python-version: "3.11"
         cache: "pip"
@@ -47,11 +47,11 @@ jobs:
     # TODO: add back once ownership is transferred
     # - name: Publish to Test PyPI
     #   if: startsWith(github.event.ref, 'refs/tags')
-    #   uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0
+    #   uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
     #   with:
     #     repository_url: https://test.pypi.org/legacy/
     #     verbose: true
 
     - name: Publish distribution 📦 to PyPI
       if: github.event_name == 'release'
-      uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0
+      uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2