diff --git a/.github/workflows/build-nix-images.yaml b/.github/workflows/build-nix-images.yaml
index 8350823..73de74a 100644
--- a/.github/workflows/build-nix-images.yaml
+++ b/.github/workflows/build-nix-images.yaml
@@ -123,7 +123,7 @@ jobs:
           extra-pull-names: nix-community,pyproject-nix,sciexp,srid
 
       - name: Setup tmate debug session
-        uses: mxschmitt/action-tmate@e5c7151931ca95bad1c6f4190c730ecf8c7dde48 # ratchet:mxschmitt/action-tmate@v3
+        uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3
         if: ${{ inputs.debug_enabled == true }}
 
       - name: Build ${{ matrix.package }}
diff --git a/.github/workflows/deploy-docs.yaml b/.github/workflows/deploy-docs.yaml
index 6ef5d13..b4b46f7 100644
--- a/.github/workflows/deploy-docs.yaml
+++ b/.github/workflows/deploy-docs.yaml
@@ -65,7 +65,7 @@ jobs:
           extra-pull-names: nix-community,poetry2nix,celldynamics,pyproject-nix,sciexp
 
       - name: Setup tmate debug session
-        uses: mxschmitt/action-tmate@e5c7151931ca95bad1c6f4190c730ecf8c7dde48 # ratchet:mxschmitt/action-tmate@v3
+        uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3
         if: ${{ inputs.debug_enabled == 'true' }}
 
       - name: Build docs
diff --git a/.github/workflows/package-release.yaml b/.github/workflows/package-release.yaml
index 71cd313..b026427 100644
--- a/.github/workflows/package-release.yaml
+++ b/.github/workflows/package-release.yaml
@@ -209,7 +209,7 @@ jobs:
           nix develop --accept-flake-config -c uv build
 
       - name: Setup tmate debug session
-        uses: mxschmitt/action-tmate@e5c7151931ca95bad1c6f4190c730ecf8c7dde48 # ratchet:mxschmitt/action-tmate@v3
+        uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3
         if: ${{ inputs.debug-enabled }}
 
       - name: Upload artifacts
diff --git a/.github/workflows/python-test.yaml b/.github/workflows/python-test.yaml
index d2a4e18..62b5ca8 100644
--- a/.github/workflows/python-test.yaml
+++ b/.github/workflows/python-test.yaml
@@ -74,7 +74,7 @@ jobs:
 
       - name: Setup tmate debug session
         if: steps.cache.outputs.should-run == 'true' && inputs.debug_enabled == 'true'
-        uses: mxschmitt/action-tmate@e5c7151931ca95bad1c6f4190c730ecf8c7dde48 # ratchet:mxschmitt/action-tmate@v3
+        uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3
 
       - name: Sync dependencies
         if: steps.cache.outputs.should-run == 'true'
diff --git a/.github/workflows/template.yaml b/.github/workflows/template.yaml
index e0bdcbb..bf6533c 100644
--- a/.github/workflows/template.yaml
+++ b/.github/workflows/template.yaml
@@ -130,7 +130,7 @@ jobs:
 
       - name: Setup tmate debug session
         if: steps.cache.outputs.should-run == 'true' && needs.set-variables.outputs.debug == 'true'
-        uses: mxschmitt/action-tmate@e5c7151931ca95bad1c6f4190c730ecf8c7dde48 # ratchet:mxschmitt/action-tmate@v3
+        uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3
 
       - name: Install omnix
         if: steps.cache.outputs.should-run == 'true'