diff --git a/.github/workflows/apidiff.yaml b/.github/workflows/apidiff.yaml
index 37c0b5f..1373649 100644
--- a/.github/workflows/apidiff.yaml
+++ b/.github/workflows/apidiff.yaml
@@ -10,15 +10,15 @@ jobs:
   compat:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/setup-go@v4
+      - uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
         with:
-          go-version: 1.21
+          go-version: 'stable'
       - run: go install golang.org/x/exp/cmd/apidiff@latest
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           ref: master
       - run: apidiff -w uuid.baseline .
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           clean: false
       - run: |
diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index 138397c..a7d59f6 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -10,11 +10,11 @@ jobs:
   unit-tests:
     strategy:
       matrix:
-        go-version: [1.19, 1.20.x, 1.21]
+        go-version: ['stable', 'oldstable']
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-go@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
         with:
           go-version: ${{ matrix.go-version }}
       - run: go test -v ./...