diff --git a/.github/workflows/appstore-build-publish.yml b/.github/workflows/appstore-build-publish.yml
index 86867b5..486a27d 100644
--- a/.github/workflows/appstore-build-publish.yml
+++ b/.github/workflows/appstore-build-publish.yml
@@ -17,7 +17,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Get version from tag
         id: tag
@@ -35,18 +35,18 @@ jobs:
           echo "Version validated: $INFO_VERSION"
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: 22
 
       - name: Setup PHP
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1 # v2
         with:
           php-version: 8.1
           coverage: none
 
       - name: Checkout Nextcloud server (for signing)
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         with:
           repository: nextcloud/server
           ref: stable30
@@ -70,7 +70,7 @@ jobs:
         run: make appstore server_dir=${{ github.workspace }}/server
 
       - name: Create GitHub release and attach tarball
-        uses: svenstaro/upload-release-action@v2
+        uses: svenstaro/upload-release-action@6b7fa9f267e90b50a19fef07b3596790bb941741 # v2
         with:
           repo_token: ${{ secrets.GITHUB_TOKEN }}
           file: ${{ env.APP_DIR }}/build/artifacts/${{ env.APP_NAME }}.tar.gz
@@ -80,7 +80,7 @@ jobs:
           prerelease: ${{ contains(steps.tag.outputs.TAG, '-alpha') || contains(steps.tag.outputs.TAG, '-beta') || contains(steps.tag.outputs.TAG, '-rc') }}
 
       - name: Upload to Nextcloud App Store
-        uses: R0Wi/nextcloud-appstore-push-action@v1.0.4
+        uses: R0Wi/nextcloud-appstore-push-action@9244bb5445776688cfe90fa1903ea8dff95b0c28 # v1.0.4
         with:
           app_name: ${{ env.APP_NAME }}
           appstore_token: ${{ secrets.APPSTORE_TOKEN }}
diff --git a/.github/workflows/bump-version.yml b/.github/workflows/bump-version.yml
index e6bbd83..3b1fd1b 100644
--- a/.github/workflows/bump-version.yml
+++ b/.github/workflows/bump-version.yml
@@ -21,7 +21,7 @@ jobs:
           token: "${{ secrets.PERSONAL_ACCESS_TOKEN }}"
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
           python-version: '3.11'
 
diff --git a/third_party/astrolabe/package-lock.json b/third_party/astrolabe/package-lock.json
index 2246c18..eb7a186 100644
--- a/third_party/astrolabe/package-lock.json
+++ b/third_party/astrolabe/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "astrolabe",
-  "version": "1.0.0",
+  "version": "0.4.4",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "astrolabe",
-      "version": "1.0.0",
+      "version": "0.4.4",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "@nextcloud/axios": "^2.5.1",
@@ -20,12 +20,12 @@
         "vue-material-design-icons": "^5.3.1"
       },
       "devDependencies": {
-        "@nextcloud/browserslist-config": "^3.0.1",
-        "@nextcloud/eslint-config": "^8.4.2",
-        "@nextcloud/stylelint-config": "^3.1.0",
-        "@nextcloud/vite-config": "^1.5.2",
-        "terser": "^5.44.1",
-        "vite": "^7.1.3"
+        "@nextcloud/browserslist-config": "3.1.2",
+        "@nextcloud/eslint-config": "8.4.2",
+        "@nextcloud/stylelint-config": "3.1.1",
+        "@nextcloud/vite-config": "1.7.2",
+        "terser": "5.44.1",
+        "vite": "7.2.7"
       },
       "engines": {
         "node": "^22.0.0",
diff --git a/third_party/astrolabe/package.json b/third_party/astrolabe/package.json
index d56a485..64a4070 100644
--- a/third_party/astrolabe/package.json
+++ b/third_party/astrolabe/package.json
@@ -29,11 +29,11 @@
     "vue-material-design-icons": "^5.3.1"
   },
   "devDependencies": {
-    "@nextcloud/browserslist-config": "^3.0.1",
-    "@nextcloud/eslint-config": "^8.4.2",
-    "@nextcloud/stylelint-config": "^3.1.0",
-    "@nextcloud/vite-config": "^1.5.2",
-    "terser": "^5.44.1",
-    "vite": "^7.1.3"
+    "@nextcloud/browserslist-config": "3.1.2",
+    "@nextcloud/eslint-config": "8.4.2",
+    "@nextcloud/stylelint-config": "3.1.1",
+    "@nextcloud/vite-config": "1.7.2",
+    "terser": "5.44.1",
+    "vite": "7.2.7"
   }
 }