diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index f7f3686..9ea9ae8 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -34,7 +34,7 @@ jobs:
       with:
         persist-credentials: false
     - name: Analyze with CodeQL
-      uses: calysto/maintainer_tools/actions/codeql@v1
+      uses: calysto/maintainer_tools/actions/codeql@v1.5.0
       with:
         language: ${{ matrix.language }}
         build-mode: ${{ matrix.build-mode }}
diff --git a/.github/workflows/enforce-label.yml b/.github/workflows/enforce-label.yml
index cb9a0b5..0090cc3 100644
--- a/.github/workflows/enforce-label.yml
+++ b/.github/workflows/enforce-label.yml
@@ -10,4 +10,4 @@ jobs:
     - uses: actions/checkout@v6
       with:
         persist-credentials: false
-    - uses: calysto/maintainer_tools/actions/enforce-label@v1
+    - uses: calysto/maintainer_tools/actions/enforce-label@v1.5.0
diff --git a/.github/workflows/pre-commit-autoupdate.yml b/.github/workflows/pre-commit-autoupdate.yml
index 9f39087..a1f3897 100644
--- a/.github/workflows/pre-commit-autoupdate.yml
+++ b/.github/workflows/pre-commit-autoupdate.yml
@@ -18,7 +18,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           persist-credentials: false
-      - uses: calysto/maintainer_tools/actions/pre-commit-autoupdate@v1
+      - uses: calysto/maintainer_tools/actions/pre-commit-autoupdate@v1.5.0
         with:
           app-id: ${{ vars.APP_ID }}
           app-private-key: ${{ secrets.APP_PRIVATE_KEY }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 000fb26..8e3d83b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -35,8 +35,8 @@ jobs:
       - uses: actions/checkout@v6
         with:
           persist-credentials: false
-      - uses: calysto/maintainer_tools/actions/base-setup@v1
-      - uses: calysto/maintainer_tools/actions/release@v1
+      - uses: calysto/maintainer_tools/actions/base-setup@v1.5.0
+      - uses: calysto/maintainer_tools/actions/release@v1.5.0
         id: release
         with:
           version: ${{ github.event_name == 'schedule' && '10.10.10.10' || inputs.version }}
@@ -61,7 +61,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
 
-      - uses: hynek/build-and-inspect-python-package@fe0a0fb1925ca263d076ca4f2c13e93a6e92a33e # v2.17.0
+      - uses: hynek/build-and-inspect-python-package@d44ca7d91762de7a7d5436ddae667c6da6d1c3df # v2.18.0
 
   publish:
     needs: [release, build-package]
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 5494ab3..aefc8ee 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -24,7 +24,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           persist-credentials: false
-      - uses: hynek/build-and-inspect-python-package@fe0a0fb1925ca263d076ca4f2c13e93a6e92a33e  # v2.17.0
+      - uses: hynek/build-and-inspect-python-package@d44ca7d91762de7a7d5436ddae667c6da6d1c3df  # v2.18.0
         id: baipp
 
   test:
@@ -42,7 +42,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           persist-credentials: false
-      - uses: calysto/maintainer_tools/actions/base-setup@v1
+      - uses: calysto/maintainer_tools/actions/base-setup@v1.5.0
         with:
           python-version: ${{ matrix.python-version }}
       - run: just test -v
@@ -55,8 +55,8 @@ jobs:
       - uses: actions/checkout@v6
         with:
           persist-credentials: false
-      - uses: calysto/maintainer_tools/actions/base-setup@v1
-      - uses: calysto/maintainer_tools/actions/test-sdist@v1
+      - uses: calysto/maintainer_tools/actions/base-setup@v1.5.0
+      - uses: calysto/maintainer_tools/actions/test-sdist@v1.5.0
 
   cover:
     name: Cover (${{ matrix.os }}, Python 3.10)
@@ -75,7 +75,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           persist-credentials: false
-      - uses: calysto/maintainer_tools/actions/base-setup@v1
+      - uses: calysto/maintainer_tools/actions/base-setup@v1.5.0
       - name: Install graphviz
         if: runner.os == 'Linux'
         uses: tecolicom/actions-use-apt-tools@065d3fb036b7fc85487573596f97732ed0d3fce1 # v1.7
@@ -96,8 +96,8 @@ jobs:
       - uses: actions/checkout@v6
         with:
           persist-credentials: false
-      - uses: calysto/maintainer_tools/actions/base-setup@v1
-      - uses: calysto/maintainer_tools/actions/pre-commit-run@v1
+      - uses: calysto/maintainer_tools/actions/base-setup@v1.5.0
+      - uses: calysto/maintainer_tools/actions/pre-commit-run@v1.5.0
       - run: just docs
       - run: just help
       - name: Test typing
@@ -111,8 +111,8 @@ jobs:
       - uses: actions/checkout@v6
         with:
           persist-credentials: false
-      - uses: calysto/maintainer_tools/actions/base-setup@v1
-      - uses: calysto/maintainer_tools/actions/test-minimum-versions@v1
+      - uses: calysto/maintainer_tools/actions/base-setup@v1.5.0
+      - uses: calysto/maintainer_tools/actions/test-minimum-versions@v1.5.0
 
   run_notebooks:
     name: Run Notebooks
@@ -123,7 +123,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           persist-credentials: false
-      - uses: calysto/maintainer_tools/actions/base-setup@v1
+      - uses: calysto/maintainer_tools/actions/base-setup@v1.5.0
       - run: just run-notebooks
 
   test_release:
@@ -135,8 +135,8 @@ jobs:
       - uses: actions/checkout@v6
         with:
           persist-credentials: false
-      - uses: calysto/maintainer_tools/actions/base-setup@v1
-      - uses: calysto/maintainer_tools/actions/release@v1
+      - uses: calysto/maintainer_tools/actions/base-setup@v1.5.0
+      - uses: calysto/maintainer_tools/actions/release@v1.5.0
         with:
           version: patch
           dry_run: "true"
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 4e0eb05..78e1cbc 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -18,4 +18,4 @@ jobs:
         with:
           persist-credentials: false
       - name: Run zizmor 🌈
-        uses: calysto/maintainer_tools/actions/zizmor@v1
+        uses: calysto/maintainer_tools/actions/zizmor@v1.5.0