diff --git a/.github/workflows/pkgdown.yml b/.github/workflows/pkgdown.yml
index 99ac714..f303464 100644
--- a/.github/workflows/pkgdown.yml
+++ b/.github/workflows/pkgdown.yml
@@ -42,7 +42,7 @@ jobs:
         run: install.packages("rmoriebricklayer", repos = c("https://rootcoder007.r-universe.dev", "https://cloud.r-project.org"))
         shell: Rscript {0}
 
-      - uses: r-lib/actions/setup-r-dependencies@2e3959d284a9ed60162f28a0f9891d1150f47f72 # v2
+      - uses: r-lib/actions/setup-r-dependencies@d3c5be51b12e724e68f33216ca3c148b66d5f0b6 # v2
         with:
           cache-version: 2
           extra-packages: any::pkgdown, local::.
diff --git a/.github/workflows/r-cmd-check.yml b/.github/workflows/r-cmd-check.yml
index 6bc1e22..f23c155 100644
--- a/.github/workflows/r-cmd-check.yml
+++ b/.github/workflows/r-cmd-check.yml
@@ -91,7 +91,7 @@ jobs:
         run: install.packages("rmoriebricklayer", repos = c("https://rootcoder007.r-universe.dev", "https://cloud.r-project.org"))
         shell: Rscript {0}
 
-      - uses: r-lib/actions/setup-r-dependencies@2e3959d284a9ed60162f28a0f9891d1150f47f72 # v2
+      - uses: r-lib/actions/setup-r-dependencies@d3c5be51b12e724e68f33216ca3c148b66d5f0b6 # v2
         with:
           cache-version: 2
           # rgenoud is a runtime Depends of Matching/rbounds (used by the
diff --git a/.github/workflows/r-coverage.yml b/.github/workflows/r-coverage.yml
index 379113e..b45e5f2 100644
--- a/.github/workflows/r-coverage.yml
+++ b/.github/workflows/r-coverage.yml
@@ -35,7 +35,7 @@ jobs:
         run: install.packages("rmoriebricklayer", repos = c("https://rootcoder007.r-universe.dev", "https://cloud.r-project.org"))
         shell: Rscript {0}
 
-      - uses: r-lib/actions/setup-r-dependencies@2e3959d284a9ed60162f28a0f9891d1150f47f72 # v2
+      - uses: r-lib/actions/setup-r-dependencies@d3c5be51b12e724e68f33216ca3c148b66d5f0b6 # v2
         with:
           # rgenoud: runtime Depends of Matching/rbounds (Rosenbaum + genetic
           # matching tests); covr runs the full suite so it's needed here too.
diff --git a/.github/workflows/r-goodpractice.yml b/.github/workflows/r-goodpractice.yml
index 2632495..aa44e7a 100644
--- a/.github/workflows/r-goodpractice.yml
+++ b/.github/workflows/r-goodpractice.yml
@@ -36,7 +36,7 @@ jobs:
         run: install.packages("rmoriebricklayer", repos = c("https://rootcoder007.r-universe.dev", "https://cloud.r-project.org"))
         shell: Rscript {0}
 
-      - uses: r-lib/actions/setup-r-dependencies@2e3959d284a9ed60162f28a0f9891d1150f47f72 # v2
+      - uses: r-lib/actions/setup-r-dependencies@d3c5be51b12e724e68f33216ca3c148b66d5f0b6 # v2
         with:
           extra-packages: any::goodpractice any::rcmdcheck any::covr any::cyclocomp any::lintr any::rgenoud
 
diff --git a/.github/workflows/r-lint.yml b/.github/workflows/r-lint.yml
index c84296b..3af80d4 100644
--- a/.github/workflows/r-lint.yml
+++ b/.github/workflows/r-lint.yml
@@ -29,7 +29,7 @@ jobs:
         run: install.packages("rmoriebricklayer", repos = c("https://rootcoder007.r-universe.dev", "https://cloud.r-project.org"))
         shell: Rscript {0}
 
-      - uses: r-lib/actions/setup-r-dependencies@2e3959d284a9ed60162f28a0f9891d1150f47f72 # v2
+      - uses: r-lib/actions/setup-r-dependencies@d3c5be51b12e724e68f33216ca3c148b66d5f0b6 # v2
         with:
           extra-packages: any::lintr
       - name: Run lintr