diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index 02d3f21..0f63672 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -15,14 +15,14 @@ jobs:
     env:
       MINT_PATH: ${{ github.workspace }}/mint
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
-    - uses: actions/setup-python@v2
+    - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
       with:
         python-version: '3.10'
 
     - name: Cache Mint packages
-      uses: actions/cache@v4
+      uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
       with:
         path: ${{ env.MINT_PATH }}
         key: ${{ runner.os }}-mint-${{ hashFiles('**/Mintfile') }}
diff --git a/.github/workflows/google-utilities.yml b/.github/workflows/google-utilities.yml
index c0c4077..0b47799 100644
--- a/.github/workflows/google-utilities.yml
+++ b/.github/workflows/google-utilities.yml
@@ -17,7 +17,7 @@ jobs:
     outputs:
       WAS_CHANGED: ${{ steps.check_changed.outputs.WAS_CHANGED }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: check_changed
         name: Check
         if: ${{ github.event_name == 'schedule' }}
@@ -32,10 +32,10 @@ jobs:
       matrix:
         target: [ios, tvos, macos]
     steps:
-    - uses: ruby/setup-ruby@v1
+    - uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # v1.314
       with:
         ruby-version: "2.7"
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
     - name: Setup Scripts Directory
       run: ./setup-scripts.sh
     - name: Setup Bundler
@@ -51,10 +51,10 @@ jobs:
 
     runs-on: macOS-latest
     steps:
-    - uses: ruby/setup-ruby@v1
+    - uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # v1.314
       with:
         ruby-version: "2.7"
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
     - name: Setup Scripts Directory
       run: ./setup-scripts.sh
     - name: Setup Bundler
@@ -68,20 +68,20 @@ jobs:
     needs: changed_today
     if: ${{ github.event_name == 'pull_request' || needs.changed_today.outputs.WAS_CHANGED == 'true' }}
 
-    runs-on: macOS-latest
+    runs-on: macos-26
     strategy:
       matrix:
         target: [iOS, tvOS, macOS, catalyst]
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
     - name: Setup Scripts Directory
       run: ./setup-scripts.sh
     - name: Initialize xcodebuild
       run: |
-        sudo xcode-select -s '/Applications/Xcode_16.2.app/Contents/Developer'
+        sudo xcode-select -s /Applications/Xcode_26.4.app/Contents/Developer
         xcodebuild -list
     - name: Install Simulator
-      if: matrix.target == 'iOS' || matrix.target == 'tvOS'
+      if: matrix.target == 'iOS'
       run: xcodebuild -downloadPlatform ${{ matrix.target }}
     - name: iOS Unit Tests
       run: scripts/third_party/travis/retry.sh scripts/build.sh GoogleUtilities-Package ${{ matrix.target }} spm
@@ -97,10 +97,10 @@ jobs:
           '--use-libraries --skip-tests'
         ]
     steps:
-    - uses: ruby/setup-ruby@v1
+    - uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # v1.314
       with:
         ruby-version: "2.7"
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
     - name: Setup Scripts Directory
       run: ./setup-scripts.sh
     - name: Setup Bundler