diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 1a56c75a3..98775eeae 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -8,6 +8,8 @@ updates:
       - "JamieMagee"
     labels:
       - "type:ci"
+    cooldown:
+      default-days: 7
 
   - package-ecosystem: 'nuget'
     directory: '/'
diff --git a/.github/workflows/smoke-test.yml b/.github/workflows/smoke-test.yml
index c192ebdb6..2c81e7bea 100644
--- a/.github/workflows/smoke-test.yml
+++ b/.github/workflows/smoke-test.yml
@@ -104,7 +104,7 @@ jobs:
           egress-policy: audit
 
       - name: Create GitHub Issue
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           script: |
             const failed_tests = [];
diff --git a/.github/workflows/snapshot-publish.yml b/.github/workflows/snapshot-publish.yml
index d63e0226c..438dca0bb 100644
--- a/.github/workflows/snapshot-publish.yml
+++ b/.github/workflows/snapshot-publish.yml
@@ -44,7 +44,7 @@ jobs:
       - run: dotnet restore
 
       - name: Setup Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
           python-version: "3.14"
 
diff --git a/.github/workflows/snapshot-verify.yml b/.github/workflows/snapshot-verify.yml
index 698bf22aa..5a650f6ec 100644
--- a/.github/workflows/snapshot-verify.yml
+++ b/.github/workflows/snapshot-verify.yml
@@ -33,7 +33,7 @@ jobs:
 
       - name: Get latest release snapshot download url
         id: download-latest-release-snapshot
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           result-encoding: string
           script: |
@@ -66,7 +66,7 @@ jobs:
         uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0
 
       - name: Setup Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
           python-version: "3.14"