diff --git a/.github/workflows/deploy-frontend.yml b/.github/workflows/deploy-frontend.yml
index 94dfd0c61..15d0d71d7 100644
--- a/.github/workflows/deploy-frontend.yml
+++ b/.github/workflows/deploy-frontend.yml
@@ -21,9 +21,9 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
 
-      - uses: prefix-dev/setup-pixi@v0.9.3
+      - uses: prefix-dev/setup-pixi@v0.10.0
         with:
           environments: frontend
 
diff --git a/.github/workflows/enforce-sha.yaml b/.github/workflows/enforce-sha.yaml
index 1e1c8d0c9..0a1501d3b 100644
--- a/.github/workflows/enforce-sha.yaml
+++ b/.github/workflows/enforce-sha.yaml
@@ -10,9 +10,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       - name: Ensure SHA pinned actions
-        uses: zgosalvez/github-actions-ensure-sha-pinned-actions@ca46236c6ce584ae24bc6283ba8dcf4b3ec8a066 # v5
+        uses: zgosalvez/github-actions-ensure-sha-pinned-actions@3db98c0363e2fa5df3e1c4c471777a7c10b24cc9 # v5
         with:
           allowlist: |
             prefix-dev/
diff --git a/.github/workflows/run_tests.yml b/.github/workflows/run_tests.yml
index fa1bb8067..b1ada0f74 100644
--- a/.github/workflows/run_tests.yml
+++ b/.github/workflows/run_tests.yml
@@ -9,9 +9,9 @@ jobs:
   run_tests:
     runs-on: ubuntu-latest
     steps:
-        - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
 
-        - uses: prefix-dev/setup-pixi@v0.9.3
+        - uses: prefix-dev/setup-pixi@v0.10.0
           with:
             pixi-version: "latest"
             manifest-path: pyproject.toml
@@ -23,9 +23,9 @@ jobs:
   pre-commit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       - name: Set up pixi
-        uses: prefix-dev/setup-pixi@v0.9.3
+        uses: prefix-dev/setup-pixi@v0.10.0
         with:
           environments: >-
             fmt
diff --git a/.github/workflows/update_channel_v0_v1.yml b/.github/workflows/update_channel_v0_v1.yml
index c7b2488ba..fbabb4a59 100644
--- a/.github/workflows/update_channel_v0_v1.yml
+++ b/.github/workflows/update_channel_v0_v1.yml
@@ -50,8 +50,8 @@ jobs:
     outputs:
       string_list: ${{ steps.generate.outputs.string_list }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-      - uses: prefix-dev/setup-pixi@v0.9.3
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: prefix-dev/setup-pixi@v0.10.0
 
       - name: Generate combination of missing subdirs and letters
         id: generate
@@ -86,8 +86,8 @@ jobs:
         subdirs: ${{fromJson(needs.generate_hash_letters.outputs.string_list)}}
 
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-      - uses: prefix-dev/setup-pixi@v0.9.3
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: prefix-dev/setup-pixi@v0.10.0
 
       - name: Get partial index artifacts
         uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
@@ -115,8 +115,8 @@ jobs:
     needs: updater_of_records
     if: needs.updater_of_records.result == 'success'
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-      - uses: prefix-dev/setup-pixi@v0.9.3
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: prefix-dev/setup-pixi@v0.10.0
 
       - name: Get partial index artifacts
         uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
@@ -141,8 +141,8 @@ jobs:
       always() &&
       (inputs.force_v1_generation == true || needs.updater_of_index.result == 'success')
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-      - uses: prefix-dev/setup-pixi@v0.9.3
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: prefix-dev/setup-pixi@v0.10.0
 
       - name: Generate and upload v1 mappings (relations table + PyPI lookups)
         run: |
@@ -168,8 +168,8 @@ jobs:
       (needs.update_v1_mappings.result == 'success' || needs.update_v1_mappings.result == 'skipped')
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-      - uses: prefix-dev/setup-pixi@v0.9.3
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: prefix-dev/setup-pixi@v0.10.0
 
       - name: Update legacy mapping (if needed)
         if: ${{ inputs.use_legacy_mapping }}