diff --git a/.copier-answers.yaml b/.copier-answers.yaml
index a00c3ae..100c098 100644
--- a/.copier-answers.yaml
+++ b/.copier-answers.yaml
@@ -1,5 +1,5 @@
 # Changes here will be overwritten by Copier
-_commit: '4875149'
+_commit: 1ea7b27
 _src_path: https://github.com/python-project-templates/base.git
 add_docs: true
 add_extension: rust
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 16f5c4a..b2c4280 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -34,12 +34,14 @@ jobs:
 
     steps:
     - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      with:
+        persist-credentials: false
 
-    - uses: actions-ext/python/setup@main
+    - uses: actions-ext/python/setup@4567028b4cf2be3739404cfd3521f0b9df98b6b1
       with:
         version: ${{ matrix.python-version }}
 
-    - uses: actions-ext/rust/setup@main
+    - uses: actions-ext/rust/setup@01743451de2c7bf6bbbd798b1575a46bf1f69b26
 
     - name: Install dependencies
       run: make develop
@@ -101,12 +103,12 @@ jobs:
         CIBW_ENVIRONMENT_MACOS: MACOSX_DEPLOYMENT_TARGET=11.0
       if: matrix.os != 'ubuntu-latest'
 
-    - uses: actions-ext/python/test-wheel@main
+    - uses: actions-ext/python/test-wheel@4567028b4cf2be3739404cfd3521f0b9df98b6b1
       with:
         module: python_template_rust
       if: matrix.os == 'ubuntu-latest'
 
-    - uses: actions-ext/python/test-sdist@main
+    - uses: actions-ext/python/test-sdist@4567028b4cf2be3739404cfd3521f0b9df98b6b1
       with:
         module: python_template_rust
       if: matrix.os == 'ubuntu-latest'
diff --git a/.github/workflows/copier.yaml b/.github/workflows/copier.yaml
index 871b414..a936d5f 100644
--- a/.github/workflows/copier.yaml
+++ b/.github/workflows/copier.yaml
@@ -12,6 +12,6 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-    - uses: actions-ext/copier-update@main
+    - uses: actions-ext/copier-update@378500315a83b5985e175139a55f1fa5ea6dde09
       with:
         token: ${{ secrets.WORKFLOW_TOKEN }}
diff --git a/.github/workflows/docs.yaml b/.github/workflows/docs.yaml
index 3e35bd4..357f8bd 100644
--- a/.github/workflows/docs.yaml
+++ b/.github/workflows/docs.yaml
@@ -16,37 +16,40 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.event.workflow_run.conclusion == 'success' || github.event_name == 'workflow_dispatch' }}
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-      - uses: actions-ext/python/setup@main
-
-      - name: Download dist from build
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
-        with:
-          pattern: dist-ubuntu-latest*
-          merge-multiple: true
-          path: dist
-          run-id: ${{ github.event.workflow_run.id }}
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          repository: ${{ github.repository }}
-        if: github.event_name == 'workflow_run'
-
-      - name: Install from wheel
-        run: |
-          uv pip install dist/*.whl
-          uv pip install dist/*.whl --target . --no-deps
-          uv pip install yardang
-        if: github.event_name == 'workflow_run'
-
-      - name: Install from source (manual trigger)
-        run: |
-          uv pip install .[develop]
-          uv pip install yardang
-        if: github.event_name == 'workflow_dispatch'
-
-      - run: yardang build
-
-      - uses: peaceiris/actions-gh-pages@84c30a85c19949d7eee79c4ff27748b70285e453 # v4.1.0
-        with:
-          publish_branch: gh-pages
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-          publish_dir: docs/html
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      with:
+        persist-credentials: false
+
+    - uses: actions-ext/python/setup@4567028b4cf2be3739404cfd3521f0b9df98b6b1
+
+    - name: Download dist from build
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+      with:
+        pattern: dist-ubuntu-latest*
+        merge-multiple: true
+        path: dist
+        run-id: ${{ github.event.workflow_run.id }}
+        github-token: ${{ secrets.GITHUB_TOKEN }}
+        repository: ${{ github.repository }}
+      if: github.event_name == 'workflow_run'
+
+    - name: Install from wheel
+      run: |
+        uv pip install dist/*.whl
+        uv pip install dist/*.whl --target . --no-deps
+        uv pip install yardang
+      if: github.event_name == 'workflow_run'
+
+    - name: Install from source (manual trigger)
+      run: |
+        uv pip install .[develop]
+        uv pip install yardang
+      if: github.event_name == 'workflow_dispatch'
+
+    - run: yardang build
+
+    - uses: peaceiris/actions-gh-pages@84c30a85c19949d7eee79c4ff27748b70285e453 # v4.1.0
+      with:
+        publish_branch: gh-pages
+        github_token: ${{ secrets.GITHUB_TOKEN }}
+        publish_dir: docs/html
diff --git a/.github/workflows/wiki.yaml b/.github/workflows/wiki.yaml
index 94125cb..964b781 100644
--- a/.github/workflows/wiki.yaml
+++ b/.github/workflows/wiki.yaml
@@ -21,6 +21,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      with:
+        persist-credentials: false
       - run: cp README.md docs/wiki/Home.md
       - uses: Andrew-Chen-Wang/github-wiki-action@1bbb4280446f9630e8e21a18012cbacf3b0f992e  # v5.0.6
         with:
diff --git a/Cargo.lock b/Cargo.lock
index 548251d..ac012ea 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -31,15 +31,15 @@ checksum = "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50"
 
 [[package]]
 name = "portable-atomic"
-version = "1.13.1"
+version = "1.14.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c33a9471896f1c69cecef8d20cbe2f7accd12527ce60845ff44c153bb2a21b49"
+checksum = "3d20d5497ef88037a52ff98267d066e7f11fcc5e99bbfbd58a42336193aacec3"
 
 [[package]]
 name = "proc-macro2"
-version = "1.0.106"
+version = "1.0.107"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
+checksum = "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9"
 dependencies = [
  "unicode-ident",
 ]
@@ -116,9 +116,9 @@ dependencies = [
 
 [[package]]
 name = "quote"
-version = "1.0.46"
+version = "1.0.47"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dfbc457d0c7a0759a614551b11a6409e5951f6c7537be1f1b7682b9ae9230368"
+checksum = "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001"
 dependencies = [
  "proc-macro2",
 ]
@@ -131,9 +131,9 @@ checksum = "cf54715a573b99ac80df0bc206da022bcd442c974952c7b9720069370852e21f"
 
 [[package]]
 name = "syn"
-version = "2.0.118"
+version = "2.0.119"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1b9ae57f904213ebb649ce6895b8a66c66f0203b9319718f69a5612a065b1422"
+checksum = "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297"
 dependencies = [
  "proc-macro2",
  "quote",