diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1a6984c..98a5659 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -2,15 +2,19 @@ name: Release
 on:
   release:
     types: [published]
+permissions:
+  contents: read
 jobs:
   publish:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-python@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
         with:
           python-version: 3.x
-      - uses: actions/cache@v3
+      - uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         with:
           path: ~/.cache/pip
           key: v1/${{ runner.os }}/pip/${{ hashFiles('{requirements,development}.txt') }}
diff --git a/development.txt b/development.txt
index b5ca3b9..6531b68 100644
--- a/development.txt
+++ b/development.txt
@@ -1,4 +1,4 @@
 httpretty==1.1.*
 pylint==2.*
-twine
+twine==5.1.1
 coverage==7.*