diff --git a/.forgejo/workflows/build.yml b/.forgejo/workflows/build.yml
index f43563dc..e5920cff 100644
--- a/.forgejo/workflows/build.yml
+++ b/.forgejo/workflows/build.yml
@@ -6,7 +6,7 @@ on: [push]
 jobs:
   build-and-publish:
     runs-on: docker
-    container: git.snaile.de/snailed/xbps-builder:2024.4.2029
+    container: git.snaile.de/snailed/xbps-builder:2024.46.1156@sha256:c69bcb9da724a31d9c1fff36fa6dc8f363b2d9f2470d3ec7887a0905c84b66ea
     env:
       LICENSE: "GPL-3.0"
       SHORT_DESCRIPTION: "Tokyonight GTK Theme"
@@ -15,7 +15,7 @@ jobs:
       ARCH: "x86_64"
     steps:
       - name: Checkout
-        uses: https://code.forgejo.org/actions/checkout@v4
+        uses: https://code.forgejo.org/actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           submodules: true
 
diff --git a/.forgejo/workflows/renovate.yml b/.forgejo/workflows/renovate.yml
index 64af1f60..f305d25e 100644
--- a/.forgejo/workflows/renovate.yml
+++ b/.forgejo/workflows/renovate.yml
@@ -7,7 +7,7 @@ on:
 jobs:
   renovate:
     runs-on: docker
-    container: renovate/renovate@sha256:328686ec82a09ea7fc4326ac03a35dff926a7e85206d7f1b376d6002e04ef526
+    container: renovate/renovate@sha256:41d577babe0af3f75c1f0784b13fcf3a6850515622b584526f574c23e21366cb
     env:
       RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
       GITHUB_COM_TOKEN: ${{ secrets.GH_NOPRIV_TOKEN }}