diff --git a/.github/actions/bump/action.yml b/.github/actions/bump/action.yml
index 553d74cf295..bb91d1f6be6 100644
--- a/.github/actions/bump/action.yml
+++ b/.github/actions/bump/action.yml
@@ -25,7 +25,7 @@ runs:
         echo "version=$LATEST" >> $GITHUB_OUTPUT
         echo "message=$MESSAGE" >> $GITHUB_OUTPUT
     - name: Create Pull Request
-      uses: peter-evans/create-pull-request@v7
+      uses: peter-evans/create-pull-request@22a9089034f40e5a961c8808d113e2c98fb63676 # v7
       with:
         add-paths: |
           LATEST
diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml
index 1d778e49d82..f35e2814fdf 100644
--- a/.github/workflows/format.yml
+++ b/.github/workflows/format.yml
@@ -34,7 +34,7 @@ jobs:
           bun-version: ${{ env.BUN_VERSION }}
       - name: Setup Dependencies
         run: |
-          bun install
+          bun ci
       - name: Format Code
         run: |
           # Start prettier in background with prefixed output
diff --git a/.github/workflows/packages-ci.yml b/.github/workflows/packages-ci.yml
index f0d9bdab992..072260a7eda 100644
--- a/.github/workflows/packages-ci.yml
+++ b/.github/workflows/packages-ci.yml
@@ -37,8 +37,8 @@ jobs:
 
       - name: Install dependencies
         run: |
-          bun install
-          pushd ./packages/bun-plugin-svelte && bun install
+          bun ci
+          pushd ./packages/bun-plugin-svelte && bun ci
 
       - name: Lint
         run: |
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a3db1518f48..81643e92f7e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -72,7 +72,7 @@ jobs:
         with:
           bun-version: "1.2.3"
       - name: Install Dependencies
-        run: bun install
+        run: bun ci
       - name: Sign Release
         run: |
           echo "$GPG_PASSPHRASE" | bun upload-assets -- "${{ env.BUN_VERSION }}"
@@ -100,7 +100,7 @@ jobs:
         with:
           bun-version: "1.2.3"
       - name: Install Dependencies
-        run: bun install
+        run: bun ci
       - name: Release
         run: bun upload-npm -- "${{ env.BUN_VERSION }}" publish
         env:
@@ -134,7 +134,7 @@ jobs:
         with:
           bun-version: "canary" # Must be 'canary' so tag is correct
       - name: Install Dependencies
-        run: bun install
+        run: bun ci
       - name: Setup Tag
         if: ${{ env.BUN_VERSION == 'canary' }}
         run: |
@@ -317,7 +317,7 @@ jobs:
         with:
           bun-version: "1.2.0"
       - name: Install Dependencies
-        run: bun install
+        run: bun ci
       - name: Release
         run: bun upload-s3 -- "${{ env.BUN_VERSION }}"
         env:
diff --git a/.github/workflows/vscode-release.yml b/.github/workflows/vscode-release.yml
index db0695ed254..dc63d76d63c 100644
--- a/.github/workflows/vscode-release.yml
+++ b/.github/workflows/vscode-release.yml
@@ -21,10 +21,10 @@ jobs:
           bun-version: "1.2.18"
 
       - name: Install dependencies (root)
-        run: bun install
+        run: bun ci
 
       - name: Install dependencies
-        run: bun install
+        run: bun ci
         working-directory: packages/bun-vscode
 
       - name: Set Version
@@ -32,7 +32,7 @@ jobs:
         working-directory: packages/bun-vscode
 
       - name: Build (inspector protocol)
-        run: bun install && bun run build
+        run: bun ci && bun run build
         working-directory: packages/bun-inspector-protocol
 
       - name: Build (vscode extension)