diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 5311ff18..0253570d 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -79,6 +79,12 @@ updates:
   - package-ecosystem: github-actions
     directory: /
 
+    # Group actions into shared PR
+    groups:
+      actions:
+        patterns:
+          - '*'
+
     schedule:
       interval: 'monthly'
     cooldown:
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ee3a62bb..19fadb44 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -27,7 +27,7 @@ jobs:
         run: corepack enable
 
       - name: Set up Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v6.3.0
         with:
           cache: yarn
           node-version-file: .nvmrc
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 36aadc49..871cc1b7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -21,7 +21,7 @@ jobs:
         run: corepack enable
 
       - name: Set up Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v6.3.0
         with:
           cache: yarn
           node-version-file: .nvmrc