diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 72baa79..5b2a355 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -13,8 +13,8 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v6
-      - uses: jdx/mise-action@v4
+      - uses: actions/checkout@v7
+      - uses: jdx/mise-action@v4.2.3
         with:
           cache_key_prefix: mise-test
       - run: mise run test
@@ -25,8 +25,8 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v6
-      - uses: jdx/mise-action@v4
+      - uses: actions/checkout@v7
+      - uses: jdx/mise-action@v4.2.3
         with:
           cache_key_prefix: mise-lint
       - run: mise run check:staticcheck
@@ -50,8 +50,8 @@ jobs:
     outputs:
       version: ${{ steps.build-push-sign.outputs.version }}
     steps:
-      - uses: actions/checkout@v6
-      - uses: jdx/mise-action@v4
+      - uses: actions/checkout@v7
+      - uses: jdx/mise-action@v4.2.3
         with:
           cache_key_prefix: mise-build-push
       - run: mise run build:testapp