diff --git a/.github/workflows/ci-alpine-build.yml b/.github/workflows/ci-alpine-build.yml
index 2de1cd94..ea22b2e9 100644
--- a/.github/workflows/ci-alpine-build.yml
+++ b/.github/workflows/ci-alpine-build.yml
@@ -53,6 +53,7 @@ jobs:
       set_qbt_with_qemu: "" # default is yes
       set_qbt_host_deps: "" # default is no
       set_qbt_host_deps_repo: "" # default is userdocs/qbt-host-deps
+      workspace: ${{ github.workspace }}
 
     steps:
       - name: Checkout ${{ inputs.distinct_id }}
@@ -105,12 +106,12 @@ jobs:
           printf '%s\n\n' "DEBIAN_FRONTEND=noninteractive" >> env.custom
 
       - name: Host - Bootstrap qemu
-        uses: userdocs/actions/qemu@fb511333f39562a36780f1cf900b0e0729b180e3 # v1.0.5
+        uses: userdocs/actions/qemu@e8f57bd585c7bb6dcce011694d6772bab657abca # v1.0.7
         with:
           target_arch: ${{ matrix.qbt_cross_name }}
 
       - name: Host - Bootstrap docker container
-        uses: userdocs/actions/qbt_docker@fb511333f39562a36780f1cf900b0e0729b180e3 # v1.0.5
+        uses: userdocs/actions/qbt_docker@e8f57bd585c7bb6dcce011694d6772bab657abca # v1.0.7
         with:
             os_id: ${{ matrix.os_id }}
             os_version_id: ${{ matrix.os_version_id }}
@@ -173,7 +174,9 @@ jobs:
           subject-path: "${{ env.qbt_build_dir }}/completed/${{ matrix.qbt_cross_name }}-${{ matrix.qbt_qt_version_name }}qbittorrent-nox"
 
       - name: Docker - Release Info ${{ inputs.distinct_id }}
-        run: docker exec -w ${wd}/${qbt_build_dir}/release_info ${container_name} bash -c 'mv *.md *.json '${wd}/${qbt_build_dir}/completed''
+        working-directory: "${{ env.workspace }}/${{ env.qbt_build_dir }}/release_info"
+        run: |
+          mv *.md *.json "${workspace}/${qbt_build_dir}/completed"
 
       - name: Host - Upload libtorrent-v${{ matrix.qbt_libtorrent_version }}-qbittorrent-nox and release info artifact ${{ inputs.distinct_id }}
         if: success()
@@ -193,7 +196,7 @@ jobs:
 
       # - name: Host - Upload build dir on error or cancel
       #   if: ( cancelled() || failure() )
-      #   uses: actions/upload-artifact@v4
+      #   uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
       #   with:
       #     name: "${{ matrix.qbt_cross_name }}-libtorrent-v${{ matrix.qbt_libtorrent_version }}-logs"
       #     path: "${{ env.qbt_build_dir }}"
diff --git a/.github/workflows/ci-debian-build.yml b/.github/workflows/ci-debian-build.yml
index 8e2a8ab9..7b6157ed 100644
--- a/.github/workflows/ci-debian-build.yml
+++ b/.github/workflows/ci-debian-build.yml
@@ -68,6 +68,7 @@ jobs:
       set_qbt_with_qemu: "" # default is yes
       set_qbt_host_deps: "" # default is no
       set_qbt_host_deps_repo: "" # default is userdocs/qbt-host-deps
+      workspace: ${{ github.workspace }}
 
     steps:
       - name: Checkout ${{ inputs.distinct_id }}
@@ -120,12 +121,12 @@ jobs:
           printf '%s\n\n' "DEBIAN_FRONTEND=noninteractive" >> env.custom
 
       - name: Host - Bootstrap qemu
-        uses: userdocs/actions/qemu@fb511333f39562a36780f1cf900b0e0729b180e3 # v1.0.5
+        uses: userdocs/actions/qemu@e8f57bd585c7bb6dcce011694d6772bab657abca # v1.0.7
         with:
           target_arch: ${{ matrix.qbt_cross_name }}
 
       - name: Host - Bootstrap docker container
-        uses: userdocs/actions/qbt_docker@fb511333f39562a36780f1cf900b0e0729b180e3 # v1.0.5
+        uses: userdocs/actions/qbt_docker@e8f57bd585c7bb6dcce011694d6772bab657abca # v1.0.7
         with:
             os_id: ${{ matrix.os_id }}
             os_version_id: ${{ matrix.os_version_id }}
@@ -183,16 +184,18 @@ jobs:
         run: docker exec -w ${wd}/${qbt_build_dir}/completed ${container_name} mv -f qbittorrent-nox ${{ matrix.qbt_cross_name }}-${{ matrix.qbt_qt_version_name }}qbittorrent-nox
 
       # - name: Generate artifact attestation  ${{ inputs.distinct_id }}
-      #   uses: actions/attest-build-provenance@v2
+      #    uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3.0.0
       #   with:
       #     subject-path: "${{ env.qbt_build_dir }}/completed/${{ matrix.qbt_cross_name }}-${{ matrix.qbt_qt_version_name }}qbittorrent-nox"
 
       # - name: Docker - Release Info ${{ inputs.distinct_id }}
-      #   run: docker exec -w /home/gh/${{ env.qbt_build_dir }}/release_info ${container_name} bash -c 'mv *.md *.json '/home/gh/${{ env.qbt_build_dir }}/completed''
+      #   working-directory: "${{ env.workspace }}/${{ env.qbt_build_dir }}/release_info"
+      #   run: |
+      #     mv *.md *.json "${workspace}/${qbt_build_dir}/completed"
 
       # - name: Host - Upload libtorrent-v${{ matrix.qbt_libtorrent_version }}-qbittorrent-nox and release info artifact ${{ inputs.distinct_id }}
       #   if: success()
-      #   uses: actions/upload-artifact@v4
+      #   uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
       #   with:
       #     name: libtorrent-v${{ matrix.qbt_libtorrent_version }}-${{ matrix.qbt_cross_name }}-${{ matrix.qbt_qt_version_name }}qbittorrent-nox
       #     path: |
@@ -201,14 +204,14 @@ jobs:
 
       # - name: Host - Upload cmake graphs artifact ${{ inputs.distinct_id }}
       #   if: success() && matrix.qbt_build_tool == ''
-      #   uses: actions/upload-artifact@v4
+      #   uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
       #   with:
       #     name: "${{ matrix.qbt_cross_name }}-libtorrent-v${{ matrix.qbt_libtorrent_version }}-graphs"
       #     path: "${{ env.qbt_build_dir }}/completed/*.png"
 
       # - name: Host - Upload build dir on error or cancel
       #   if: ( cancelled() || failure() )
-      #   uses: actions/upload-artifact@v4
+      #   uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
       #   with:
       #     name: "${{ matrix.qbt_cross_name }}-libtorrent-v${{ matrix.qbt_libtorrent_version }}-logs"
       #     path: "${{ env.qbt_build_dir }}"
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index f8f21d54..6ac51bec 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -25,7 +25,7 @@ jobs:
           persist-credentials: false
 
       - name: Install, build, and upload your site
-        uses: withastro/action@063f85a3c9fc861a0a5e5a956225d9031177eff9 # v4
+        uses: withastro/action@77fad83745446cf039d76af7037b782f1af80749 # v4.1.0
         with:
           path: ./docs