diff --git a/.copier-answers.yaml b/.copier-answers.yaml
index 35b627b..85efc45 100644
--- a/.copier-answers.yaml
+++ b/.copier-answers.yaml
@@ -1,5 +1,5 @@
 # Changes here will be overwritten by Copier
-_commit: '4875149'
+_commit: c2ea129
 _src_path: https://github.com/python-project-templates/base.git
 add_docs: false
 add_extension: python
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 0e3d254..373c45a 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -31,8 +31,9 @@ jobs:
           cibuildwheel:
             - "cp311"
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       with:
+        persist-credentials: false
         submodules: 'true'
 
     - name: Setup cache (mac/linux)
diff --git a/.github/workflows/copier.yaml b/.github/workflows/copier.yaml
index 871b414..a936d5f 100644
--- a/.github/workflows/copier.yaml
+++ b/.github/workflows/copier.yaml
@@ -12,6 +12,6 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-    - uses: actions-ext/copier-update@main
+    - uses: actions-ext/copier-update@378500315a83b5985e175139a55f1fa5ea6dde09
       with:
         token: ${{ secrets.WORKFLOW_TOKEN }}