diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 4cccbec..0e6a663 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -12,21 +12,21 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@85e6279cec87321a52edac9c87bce653a07cf6c2  # Version 4.2.2
+        uses: actions/checkout@85e6279cec87321a52edac9c87bce653a07cf6c2  # v4.2.2
 
       # Stable toolchain for building and clippy, version and components from rust-toolchain.toml.
       - name: Install Rust Toolchain
-        uses: actions-rust-lang/setup-rust-toolchain@2b1f5e9b395427c92ee4e3331786ca3c37afe2d7  # Version 1.16.0
+        uses: actions-rust-lang/setup-rust-toolchain@2b1f5e9b395427c92ee4e3331786ca3c37afe2d7  # v1.16.0
 
       # Nightly toolchain for rustfmt only — nightly is required for formatting features not yet stable.
       - name: Install Nightly Toolchain (fmt)
-        uses: actions-rust-lang/setup-rust-toolchain@2b1f5e9b395427c92ee4e3331786ca3c37afe2d7  # Version 1.16.0
+        uses: actions-rust-lang/setup-rust-toolchain@2b1f5e9b395427c92ee4e3331786ca3c37afe2d7  # v1.16.0
         with:
           toolchain: nightly-2026-02-28
           components: rustfmt
 
       - name: Cache Cargo artifacts
-        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # Version 4.2.3
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
         with:
           path: |
             ~/.cargo/registry
@@ -37,13 +37,13 @@ jobs:
             ${{ runner.os }}-cargo-
 
       - name: Install taplo
-        run: cargo install taplo-cli --version 0.9.3 --locked
+        run: cargo install taplo-cli --version 0.9.3 --locked  # v0.9.3
 
       - name: Install cargo-deny
-        run: cargo install cargo-deny --version 0.19.0 --locked
+        run: cargo install cargo-deny --version 0.19.4 --locked  # v0.19.4
 
       - name: Install cargo-machete
-        run: cargo install cargo-machete --version 0.19.1 --locked
+        run: cargo install cargo-machete --version 0.9.2 --locked  # v0.9.2
 
       - name: Check Rust formatting
         id: fmt
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 7a4a2a5..74aadb4 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -12,7 +12,7 @@ repos:
           ["--all", "--all-targets", "--all-features", "--", "-D", "warnings"]
         pass_filenames: false
   - repo: https://github.com/EmbarkStudios/cargo-deny
-    rev: 09faadcea2d0d1742492e6872b743d1e4d151a27 # 0.19.0
+    rev: cfe589ec21d70996a3e44d76a8e2b9369f7e0a2f # v0.19.4
     hooks:
       - id: cargo-deny
         args:
@@ -28,12 +28,12 @@ repos:
           - -D
           - warnings
   - repo: https://github.com/ComPWA/taplo-pre-commit
-    rev: 6355f0e9a28a910b80c91f7f6521c03d0ea50fba # 0.9.3 # Can't update until: https://github.com/tamasfe/taplo/issues/805
+    rev: ade0f95ddcf661c697d4670d2cfcbe95d0048a0a # v0.9.3 # Can't update until: https://github.com/tamasfe/taplo/issues/805
     hooks:
       - id: taplo-format
       - id: taplo-lint
   - repo: https://github.com/bnjbvr/cargo-machete
-    rev: 78beac95c8fd7c25bdfb194415128523e41512d5 # 0.19.1
+    rev: ac30a525c0a8d163a92d727b3ff079ee3f6ecb08 # v0.9.2
     hooks:
       - id: cargo-machete
         args: ["rust/"]