diff --git a/.github/workflows/add-issues-to-project.yaml b/.github/workflows/add-issues-to-project.yaml
index 849a29a..e34186d 100644
--- a/.github/workflows/add-issues-to-project.yaml
+++ b/.github/workflows/add-issues-to-project.yaml
@@ -14,7 +14,7 @@ jobs:
     name: Add issue to project
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/add-to-project@v1.0.2
+      - uses: actions/add-to-project@5afcf98fcd03f1c2f92c3c83f58ae24323cc57fd # v2.0.0
         with:
           project-url: https://github.com/orgs/famedly/projects/50
           github-token: ${{ secrets.ADD_ISSUE_TO_PROJECT_PAT }}
diff --git a/.github/workflows/rust-workflow.yml b/.github/workflows/rust-workflow.yml
index e3642fe..affe59e 100644
--- a/.github/workflows/rust-workflow.yml
+++ b/.github/workflows/rust-workflow.yml
@@ -26,7 +26,7 @@ jobs:
   compliance:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - name: REUSE Compliance Check
         uses: fsfe/reuse-action@6ac5c823270d369f01e3c491c708f706f2bdc355
       - name: Dependency license check
diff --git a/Cargo.lock b/Cargo.lock
index 4e59c2a..8c75e6b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -224,7 +224,7 @@ dependencies = [
  "schemars",
  "serde",
  "serde_json",
- "thiserror 1.0.69",
+ "thiserror 2.0.17",
  "time",
  "tracing",
  "url",
diff --git a/Cargo.toml b/Cargo.toml
index 5b6a984..fd5c0bc 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -28,7 +28,7 @@ paste = { version = "1.0.0", optional = true }
 reqwest = { version = "0.13.0", optional = true }
 schemars = { version = "1.2.0", optional = true }
 serde = { version = "1.0.194", features = ["derive"], optional = true }
-thiserror = { version = "1.0.0", optional = true }
+thiserror = { version = "2.0.0", optional = true }
 time = { version = "0.3.0", optional = true }
 tracing = { version = "0.1.0", optional = true }
 url = { version = "2.5.0", features = ["serde"], optional = true }