diff --git a/.copier-answers.yaml b/.copier-answers.yaml
index 193e506..de66ed8 100644
--- a/.copier-answers.yaml
+++ b/.copier-answers.yaml
@@ -1,5 +1,5 @@
 # Changes here will be overwritten by Copier
-_commit: '4875149'
+_commit: 1ea7b27
 _src_path: https://github.com/python-project-templates/base.git
 add_docs: true
 add_extension: python
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index c30a375..aa96acf 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -34,8 +34,10 @@ jobs:
 
     steps:
     - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      with:
+        persist-credentials: false
 
-    - uses: actions-ext/python/setup@main
+    - uses: actions-ext/python/setup@4567028b4cf2be3739404cfd3521f0b9df98b6b1
       with:
         version: ${{ matrix.python-version }}
 
@@ -74,11 +76,11 @@ jobs:
     - name: Make dist
       run: make dist
 
-    - uses: actions-ext/python/test-wheel@main
+    - uses: actions-ext/python/test-wheel@4567028b4cf2be3739404cfd3521f0b9df98b6b1
       with:
         module: python_template
 
-    - uses: actions-ext/python/test-sdist@main
+    - uses: actions-ext/python/test-sdist@4567028b4cf2be3739404cfd3521f0b9df98b6b1
       with:
         module: python_template
 
diff --git a/.github/workflows/copier.yaml b/.github/workflows/copier.yaml
index 871b414..a936d5f 100644
--- a/.github/workflows/copier.yaml
+++ b/.github/workflows/copier.yaml
@@ -12,6 +12,6 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-    - uses: actions-ext/copier-update@main
+    - uses: actions-ext/copier-update@378500315a83b5985e175139a55f1fa5ea6dde09
       with:
         token: ${{ secrets.WORKFLOW_TOKEN }}
diff --git a/.github/workflows/docs.yaml b/.github/workflows/docs.yaml
index 3e35bd4..b06e73e 100644
--- a/.github/workflows/docs.yaml
+++ b/.github/workflows/docs.yaml
@@ -17,7 +17,9 @@ jobs:
     if: ${{ github.event.workflow_run.conclusion == 'success' || github.event_name == 'workflow_dispatch' }}
     steps:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-      - uses: actions-ext/python/setup@main
+      with:
+        persist-credentials: false
+      - uses: actions-ext/python/setup@4567028b4cf2be3739404cfd3521f0b9df98b6b1
 
       - name: Download dist from build
         uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
diff --git a/.github/workflows/wiki.yaml b/.github/workflows/wiki.yaml
index 94125cb..964b781 100644
--- a/.github/workflows/wiki.yaml
+++ b/.github/workflows/wiki.yaml
@@ -21,6 +21,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      with:
+        persist-credentials: false
       - run: cp README.md docs/wiki/Home.md
       - uses: Andrew-Chen-Wang/github-wiki-action@1bbb4280446f9630e8e21a18012cbacf3b0f992e  # v5.0.6
         with: