diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8bddb78..c96c491 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,15 +13,14 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7.0.1
+        with:
+          persist-credentials: false
 
-      - uses: actions/setup-python@v5
+      - uses: compas-dev/compas-actions/setup-python@v1
         with:
           python-version: "3.12"
 
-      - name: Install
-        run: pip install -e ".[dev]"
-
       - name: Lint
         run: |
           ruff check .
@@ -37,15 +36,14 @@ jobs:
         python: ["3.9", "3.12"]
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7.0.1
+        with:
+          persist-credentials: false
 
-      - uses: actions/setup-python@v5
+      - uses: compas-dev/compas-actions/setup-python@v1
         with:
           python-version: ${{ matrix.python }}
 
-      - name: Install
-        run: pip install -e ".[dev]"
-
       - name: Test
         run: pytest -m "not dotnet"
 
@@ -64,18 +62,17 @@ jobs:
       GHPYTHON_COMPONENTIZER_REQUIRE_DOTNET: "1"
 
     steps:
-      - uses: actions/checkout@v4
-
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v7.0.1
         with:
-          python-version: "3.12"
+          persist-credentials: false
 
       - name: Install Mono and libgdiplus
         if: runner.os == 'macOS'
         run: brew install mono mono-libgdiplus
 
-      - name: Install
-        run: pip install -e ".[dev]"
+      - uses: compas-dev/compas-actions/setup-python@v1
+        with:
+          python-version: "3.12"
 
       - name: Build the example components
         run: pytest -m dotnet -v
diff --git a/.github/workflows/prepare-release.yml b/.github/workflows/prepare-release.yml
index a571cc1..634adab 100644
--- a/.github/workflows/prepare-release.yml
+++ b/.github/workflows/prepare-release.yml
@@ -20,7 +20,7 @@ jobs:
   release-pr:
     runs-on: ubuntu-latest
     steps:
-      - uses: compas-dev/compas-actions/release-pr@main
+      - uses: compas-dev/compas-actions/release-pr@v1
         with:
           release-type: ${{ inputs.release-type }}
           github-token: ${{ github.token }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a27e7f5..2213b3c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -17,7 +17,7 @@ jobs:
       version: ${{ steps.release.outputs.version }}
       tag: ${{ steps.release.outputs.tag }}
     steps:
-      - uses: compas-dev/compas-actions/release-check@main
+      - uses: compas-dev/compas-actions/release-check@v1
         id: release
 
   prepare:
@@ -25,7 +25,7 @@ jobs:
     if: needs.release.outputs.is-release == 'true'
     runs-on: ubuntu-latest
     steps:
-      - uses: compas-dev/compas-actions/prepare-release@main
+      - uses: compas-dev/compas-actions/prepare-release@v1
         with:
           python-version: "3.12"
           management-tool: uv
@@ -57,7 +57,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: compas-dev/compas-actions/github-release@main
+      - uses: compas-dev/compas-actions/github-release@v1
         with:
           github-token: ${{ github.token }}
           tag-name: ${{ needs.release.outputs.tag }}