diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 8a6eee5..a47d48b 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -29,7 +29,7 @@ jobs:
     - name: Validate composer.json and composer.lock
       run: composer validate
 
-    - uses: "ramsey/composer-install@v1"
+    - uses: "ramsey/composer-install@4.0.0"
       with:
         dependency-versions: "highest"
 
diff --git a/.github/workflows/update-ranges.yml b/.github/workflows/update-ranges.yml
index 4139fd8..c3a5fcb 100644
--- a/.github/workflows/update-ranges.yml
+++ b/.github/workflows/update-ranges.yml
@@ -17,7 +17,7 @@ jobs:
         with:
           php-version: 8.4
 
-      - uses: ramsey/composer-install@v3
+      - uses: ramsey/composer-install@4.0.0
 
       - name: Update ISBN ranges
         run: composer update-ranges