diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 916e6d2..9d376ae 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,11 +14,11 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
-          node-version: 24
+          node-version: 24.15.0
 
       - run: corepack enable
 
@@ -26,7 +26,7 @@ jobs:
         id: cache
         run: echo "path=$(pnpm store path)" >> "$GITHUB_OUTPUT"
 
-      - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
           path: ${{ steps.cache.outputs.path }}
           key: v1-pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}
@@ -42,11 +42,11 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
-          node-version: 24
+          node-version: 24.15.0
 
       - run: corepack enable
 
@@ -54,7 +54,7 @@ jobs:
         id: cache
         run: echo "path=$(pnpm store path)" >> "$GITHUB_OUTPUT"
 
-      - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
           path: ${{ steps.cache.outputs.path }}
           key: v1-pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}
@@ -70,11 +70,11 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
-          node-version: 24
+          node-version: 24.15.0
 
       - run: corepack enable
 
@@ -82,7 +82,7 @@ jobs:
         id: cache
         run: echo "path=$(pnpm store path)" >> "$GITHUB_OUTPUT"
 
-      - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
           path: ${{ steps.cache.outputs.path }}
           key: v1-pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}
@@ -116,7 +116,7 @@ jobs:
       cancel-in-progress: true
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Download artifacts
         uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 78ef58b..a4d39fc 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -15,10 +15,10 @@ overrides:
   eslint-plugin-pnpm>jsonc-eslint-parser: '-'
   volar-service-pug: '-'
   volar-service-pug-beautify: '-'
-  es-set-tostringtag: npm:@nolyfill/es-set-tostringtag@^1
-  hasown: npm:@nolyfill/hasown@^1
-  safe-buffer: npm:@nolyfill/safe-buffer@^1
-  safer-buffer: npm:@nolyfill/safer-buffer@^1
+  es-set-tostringtag: npm:@nolyfill/es-set-tostringtag@1.0.44
+  hasown: npm:@nolyfill/hasown@1.0.44
+  safe-buffer: npm:@nolyfill/safe-buffer@1.0.44
+  safer-buffer: npm:@nolyfill/safer-buffer@1.0.44
 
 importers:
 
@@ -2403,6 +2403,7 @@ packages:
   rolldown-vite@7.1.4:
     resolution: {integrity: sha512-VE0cXhJfTypUhm71w4pR62dMyqw8JKHWMdbUBSDVqZTGGpZz5Zkw+cT47rvBR/SQ9E9F2GtlW02rWIY2T9HdLg==}
     engines: {node: ^20.19.0 || >=22.12.0}
+    deprecated: Use 7.3.1 for migration purposes. For the most recent updates, migrate to Vite 8 once you're ready.
     hasBin: true
     peerDependencies:
       '@types/node': ^20.19.0 || >=22.12.0
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index eeb8b64..911a2e1 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -12,10 +12,10 @@ overrides:
   volar-service-pug: "-"
   volar-service-pug-beautify: "-"
 
-  es-set-tostringtag: npm:@nolyfill/es-set-tostringtag@^1
-  hasown: npm:@nolyfill/hasown@^1
-  safe-buffer: npm:@nolyfill/safe-buffer@^1
-  safer-buffer: npm:@nolyfill/safer-buffer@^1
+  es-set-tostringtag: npm:@nolyfill/es-set-tostringtag@1.0.44
+  hasown: npm:@nolyfill/hasown@1.0.44
+  safe-buffer: npm:@nolyfill/safe-buffer@1.0.44
+  safer-buffer: npm:@nolyfill/safer-buffer@1.0.44
 
 savePrefix: ""
 shellEmulator: true