diff --git a/.github/workflows/sphinxbuild.yml b/.github/workflows/sphinxbuild.yml
index df219de1d..710d0672e 100644
--- a/.github/workflows/sphinxbuild.yml
+++ b/.github/workflows/sphinxbuild.yml
@@ -11,10 +11,10 @@ jobs:
   user_manual:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
-    - uses: actions/setup-python@v6
+    - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+    - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6
       with:
-        python-version: '3.10'
+        python-version: '3.12'
         cache: 'pip'
     - name: Install pip dependencies
       run: pip install -r requirements.txt
@@ -24,7 +24,7 @@ jobs:
       shell: bash
       run: tar czf /tmp/documentation.tar.gz -C user_manual/_build/html .
     - name: Upload static documentation
-      uses: actions/upload-artifact@v5.0.0
+      uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
       with:
         name: User manual.zip
         path: "/tmp/documentation.tar.gz"
@@ -32,10 +32,10 @@ jobs:
   user_manual-en:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
-    - uses: actions/setup-python@v6
+    - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+    - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6
       with:
-        python-version: '3.10'
+        python-version: '3.12'
         cache: 'pip'
     - name: Install pip dependencies
       run: pip install -r requirements.txt
@@ -45,10 +45,10 @@ jobs:
   developer_manual:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
-    - uses: actions/setup-python@v6
+    - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+    - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6
       with:
-        python-version: '3.10'
+        python-version: '3.12'
         cache: 'pip'
     - name: Install pip dependencies
       run: pip install -r requirements.txt
@@ -58,7 +58,7 @@ jobs:
       shell: bash
       run: tar czf /tmp/documentation.tar.gz -C developer_manual/_build/html/com .
     - name: Upload static documentation
-      uses: actions/upload-artifact@v5.0.0
+      uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
       with:
         name: Developer manual.zip
         path: "/tmp/documentation.tar.gz"
@@ -66,10 +66,10 @@ jobs:
   admin_manual:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
-    - uses: actions/setup-python@v6
+    - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+    - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6
       with:
-        python-version: '3.10'
+        python-version: '3.12'
         cache: 'pip'
     - name: Install pip dependencies
       run: pip install -r requirements.txt
@@ -79,7 +79,7 @@ jobs:
       shell: bash
       run: tar czf /tmp/documentation.tar.gz -C admin_manual/_build/html/com .
     - name: Upload static documentation
-      uses: actions/upload-artifact@v5.0.0
+      uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
       with:
         name: Administration manual.zip
         path: "/tmp/documentation.tar.gz"