diff --git a/.github/workflows/commit.yml b/.github/workflows/commit.yml
index 9f61310..0675aa1 100644
--- a/.github/workflows/commit.yml
+++ b/.github/workflows/commit.yml
@@ -11,7 +11,7 @@ jobs:
       contents: read
       pull-requests: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: 1Password/check-signed-commits-action@v1
 
diff --git a/.github/workflows/generate.yml b/.github/workflows/generate.yml
index 7d2598d..b018833 100644
--- a/.github/workflows/generate.yml
+++ b/.github/workflows/generate.yml
@@ -14,14 +14,14 @@ jobs:
     name: OpenAPI Up-to-date
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
 
       - name: Install openapi-gen
-        run: go install k8s.io/kube-openapi/cmd/openapi-gen@latest
+        run: go install "k8s.io/kube-openapi/cmd/openapi-gen@$(go list -m k8s.io/kube-openapi | cut -d' ' -f2)"
 
       - name: Generate OpenAPI
         run: |
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index ce5cd35..b3c7a9e 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -13,7 +13,7 @@ jobs:
     steps:
       - uses: jlumbroso/free-disk-space@v1.3.1
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: setup Go
         uses: actions/setup-go@v6
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index f524517..eb3a65b 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -13,7 +13,7 @@ jobs:
     name: Prek Checks
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-go@v6
         with:
@@ -24,6 +24,6 @@ jobs:
           version: latest
           install-only: true
 
-      - run: go install golang.org/x/tools/cmd/goimports@latest
+      - run: go install golang.org/x/tools/cmd/goimports@v0.49.0
 
       - uses: j178/prek-action@v2
diff --git a/Taskfile.yml b/Taskfile.yml
index 4825b93..1c9c0f5 100644
--- a/Taskfile.yml
+++ b/Taskfile.yml
@@ -4,7 +4,7 @@ tasks:
   generate:openapi:
     desc: Generate OpenAPI definitions from Go types
     cmds:
-      - go install k8s.io/kube-openapi/cmd/openapi-gen@latest
+      - go install "k8s.io/kube-openapi/cmd/openapi-gen@$(go list -m k8s.io/kube-openapi | cut -d' ' -f2)"
       - |
         openapi-gen \
           --output-dir pkg/openapi \