diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 446ef0c..b57c85d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,17 +14,17 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.3
 
       - name: Set up pnpm
-        uses: pnpm/action-setup@v6
+        uses: pnpm/action-setup@v6.0.9
         with:
-          version: 11
+          version: 11.10.0
 
       - name: Set up Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v6.4.0
         with:
-          node-version: 24
+          node-version: 24.18.0
           cache: pnpm
 
       - name: Install dependencies
diff --git a/renovate.json b/renovate.json
index 961da7b..a7269bf 100644
--- a/renovate.json
+++ b/renovate.json
@@ -2,6 +2,6 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [":disableRateLimiting", "config:js-app", ":semanticCommitTypeAll(chore)"],
   "labels": ["dependencies"],
-  "constraints": { "node": "24", "pnpm": "11.2.2" },
+  "constraints": { "node": "24.18.0", "pnpm": "11.2.2" },
   "minimumReleaseAge": "1 days"
 }