diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml
index 2749eb23a..292957465 100644
--- a/.github/workflows/cla.yml
+++ b/.github/workflows/cla.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check CLA
-        uses: conda/actions/check-cla@f05161c6e6e37a49b17c8e0b436197b53830318a # v25.9.2
+        uses: conda/actions/check-cla@87cb4b58e6a169cb41db8af4d49ace6275f7b213 # v25.9.0
         with:
           # [required]
           # A token with ability to comment, label, and modify the commit status
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 1c72a007f..f081a2c4e 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -33,7 +33,7 @@ jobs:
             days-before-issue-stale: 90
             days-before-issue-close: 21
     steps:
-      - uses: conda/actions/read-yaml@f05161c6e6e37a49b17c8e0b436197b53830318a # v25.9.2
+      - uses: conda/actions/read-yaml@87cb4b58e6a169cb41db8af4d49ace6275f7b213 # v25.9.0
         id: read_yaml
         with:
           path: https://raw.githubusercontent.com/conda/infra/main/.github/messages.yml
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index c9504b2ff..80c75f9bf 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -55,11 +55,11 @@ jobs:
           git config --global user.name 'Conda Bot'
           git config --global user.email '18747875+conda-bot@users.noreply.github.com'
 
-      - uses: conda/actions/combine-durations@f05161c6e6e37a49b17c8e0b436197b53830318a # v25.9.2
+      - uses: conda/actions/combine-durations@87cb4b58e6a169cb41db8af4d49ace6275f7b213 # v25.9.0
         id: durations
         continue-on-error: true
 
-      - uses: conda/actions/template-files@f05161c6e6e37a49b17c8e0b436197b53830318a # v25.9.2
+      - uses: conda/actions/template-files@87cb4b58e6a169cb41db8af4d49ace6275f7b213 # v25.9.0
         id: templates
         continue-on-error: true