diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 19d75a72..62f2f213 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -5,7 +5,7 @@ concurrency:
 jobs:
   ci:
     if: ${{ !cancelled() && ! failure() }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
@@ -33,7 +33,7 @@ jobs:
           - '3.12'
   consistency:
     if: ${{ !cancelled() && ! failure() }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: Set up Git
diff --git a/.github/workflows/commitlint.yml b/.github/workflows/commitlint.yml
index d5e16c12..feb94f8e 100644
--- a/.github/workflows/commitlint.yml
+++ b/.github/workflows/commitlint.yml
@@ -4,7 +4,7 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
 jobs:
   commitlint:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - run: env | sort
diff --git a/.github/workflows/devcontainer.yml b/.github/workflows/devcontainer.yml
index 60102c41..7190079e 100644
--- a/.github/workflows/devcontainer.yml
+++ b/.github/workflows/devcontainer.yml
@@ -7,7 +7,7 @@ jobs:
     permissions:
       contents: read
       packages: write
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
       - uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
diff --git a/.github/workflows/readthedocs-preview.yml b/.github/workflows/readthedocs-preview.yml
index 9e046f3f..b0549406 100644
--- a/.github/workflows/readthedocs-preview.yml
+++ b/.github/workflows/readthedocs-preview.yml
@@ -4,7 +4,7 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
 jobs:
   documentation-links:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: readthedocs/actions/preview@cc0920454cf03ca8a3fbd3cbaa2ce2e509e70636 # v1.2
         with:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8d29de50..70873c3b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,7 +1,7 @@
 name: Release
 jobs:
   pages-build:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
@@ -31,7 +31,7 @@ jobs:
     needs: pages-build
     permissions:
       contents: write
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - name: Download release notes
         uses: actions/download-artifact@eaceaf801fd36c7dee90939fad912460b18a1ffe # v4.1.2
@@ -55,7 +55,7 @@ jobs:
     permissions:
       contents: read
       packages: write
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
       - uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
@@ -105,7 +105,7 @@ jobs:
           - '3.12'
   package-publish:
     needs: release-publish
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - uses: pdm-project/setup-pdm@c050bdcb2405837648035b6678c75609d53a749f # v4
@@ -122,7 +122,7 @@ jobs:
     permissions:
       id-token: write
       pages: write
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - id: deployment
         name: Deploy to GitHub Pages
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index 757adee8..100a980c 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -14,7 +14,7 @@ jobs:
         RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
       image: ghcr.io/renovatebot/renovate:37.214.0@sha256:f5351474828f2197862b18adfd15d9923e44f294c4429868ac0013df5385362f
       options: '--user root'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - run: env | sort
       - id: generate-token
diff --git a/.gitlab/workflows/commitlint.yml b/.gitlab/workflows/commitlint.yml
index 23367f53..1539bb2d 100644
--- a/.gitlab/workflows/commitlint.yml
+++ b/.gitlab/workflows/commitlint.yml
@@ -1,6 +1,6 @@
 commitlint:
   image:
-    name: commitlint/commitlint:latest
+    name: commitlint/commitlint:18.6.2
     entrypoint: [""]
   interruptible: true
   rules:
diff --git a/.gitlab/workflows/devcontainer.yml b/.gitlab/workflows/devcontainer.yml
index 9be72847..71fc291c 100644
--- a/.gitlab/workflows/devcontainer.yml
+++ b/.gitlab/workflows/devcontainer.yml
@@ -1,5 +1,5 @@
 dev-container-publish:
-  image: docker:latest
+  image: docker:25.0.3
   parallel:
     matrix:
       - PYTHON_VERSION:
@@ -29,7 +29,7 @@ dev-container-publish:
         --tag ${CI_REGISTRY_IMAGE}/dev:py${PYTHON_VERSION} \
         --target dev
   services:
-    - docker:dind
+    - docker:25.0.3-dind
   stage: build
   variables:
     DOCKER_TLS_CERTDIR: /certs
diff --git a/.gitlab/workflows/release.yml b/.gitlab/workflows/release.yml
index d94594f3..257c04ad 100644
--- a/.gitlab/workflows/release.yml
+++ b/.gitlab/workflows/release.yml
@@ -12,7 +12,7 @@ pages-build:
     - make release-notes > release-notes.md
   stage: release
 release-publish:
-  image: registry.gitlab.com/gitlab-org/release-cli:latest
+  image: registry.gitlab.com/gitlab-org/release-cli:v0.16.0
   needs:
     - pages-build
   release:
@@ -24,7 +24,7 @@ release-publish:
     - echo "Running the release job."
   stage: release
 container-publish:
-  image: docker:latest
+  image: docker:25.0.3
   needs:
     - release-publish
   parallel:
@@ -65,7 +65,7 @@ container-publish:
         --tag ${CI_REGISTRY_IMAGE}:py${PYTHON_VERSION}-${CI_COMMIT_TAG} \
         --target prod
   services:
-    - docker:dind
+    - docker:25.0.3-dind
   stage: release
   variables:
     DOCKER_TLS_CERTDIR: /certs
diff --git a/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/ci.yml.jinja b/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/ci.yml.jinja
index 1fc56843..182ea99d 100644
--- a/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/ci.yml.jinja	
+++ b/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/ci.yml.jinja	
@@ -6,7 +6,7 @@ concurrency:
 jobs:
   ci:
     if: {{ '${{ !cancelled() && ! failure() }}' }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
@@ -45,7 +45,7 @@ jobs:
 [%- if project_name == "Serious Scaffold Python" %]
   consistency:
     if: {{ '${{ !cancelled() && ! failure() }}' }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: Set up Git
diff --git a/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/commitlint.yml b/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/commitlint.yml
index d5e16c12..feb94f8e 100644
--- a/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/commitlint.yml	
+++ b/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/commitlint.yml	
@@ -4,7 +4,7 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
 jobs:
   commitlint:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - run: env | sort
diff --git a/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/devcontainer.yml.jinja b/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/devcontainer.yml.jinja
index d33da42d..bd1d7a5b 100644
--- a/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/devcontainer.yml.jinja	
+++ b/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/devcontainer.yml.jinja	
@@ -8,7 +8,7 @@ jobs:
     permissions:
       contents: read
       packages: write
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
       - uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
diff --git a/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/readthedocs-preview.yml.jinja b/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/readthedocs-preview.yml.jinja
index 6c7d36df..1090b991 100644
--- a/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/readthedocs-preview.yml.jinja	
+++ b/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/readthedocs-preview.yml.jinja	
@@ -4,7 +4,7 @@ concurrency:
   group: {{ '${{ github.workflow }}-${{ github.ref }}' }}
 jobs:
   documentation-links:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: readthedocs/actions/preview@cc0920454cf03ca8a3fbd3cbaa2ce2e509e70636 # v1.2
         with:
diff --git a/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/release.yml.jinja b/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/release.yml.jinja
index 9aba09dd..03a9f273 100644
--- a/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/release.yml.jinja	
+++ b/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/release.yml.jinja	
@@ -2,7 +2,7 @@
 name: Release
 jobs:
   pages-build:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
@@ -32,7 +32,7 @@ jobs:
     needs: pages-build
     permissions:
       contents: write
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - name: Download release notes
         uses: actions/download-artifact@eaceaf801fd36c7dee90939fad912460b18a1ffe # v4.1.2
@@ -56,7 +56,7 @@ jobs:
     permissions:
       contents: read
       packages: write
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
       - uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
@@ -116,7 +116,7 @@ jobs:
 [%- endif %]
   package-publish:
     needs: release-publish
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - uses: pdm-project/setup-pdm@c050bdcb2405837648035b6678c75609d53a749f # v4
@@ -133,7 +133,7 @@ jobs:
     permissions:
       id-token: write
       pages: write
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - id: deployment
         name: Deploy to GitHub Pages
diff --git a/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/renovate.yml.jinja b/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/renovate.yml.jinja
index 0a6340c3..f9650222 100644
--- a/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/renovate.yml.jinja	
+++ b/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/renovate.yml.jinja	
@@ -14,7 +14,7 @@ jobs:
         RENOVATE_TOKEN: {{ '${{ secrets.RENOVATE_TOKEN }}' }}
       image: ghcr.io/renovatebot/renovate:37.214.0@sha256:f5351474828f2197862b18adfd15d9923e44f294c4429868ac0013df5385362f
       options: '--user root'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - run: env | sort
       - id: generate-token
diff --git a/template/[% if repo_host_type == 'gitlab.com' or repo_host_type == 'gitlab-self-managed' %].gitlab[% endif %]/workflows/commitlint.yml b/template/[% if repo_host_type == 'gitlab.com' or repo_host_type == 'gitlab-self-managed' %].gitlab[% endif %]/workflows/commitlint.yml
index 23367f53..1539bb2d 100644
--- a/template/[% if repo_host_type == 'gitlab.com' or repo_host_type == 'gitlab-self-managed' %].gitlab[% endif %]/workflows/commitlint.yml	
+++ b/template/[% if repo_host_type == 'gitlab.com' or repo_host_type == 'gitlab-self-managed' %].gitlab[% endif %]/workflows/commitlint.yml	
@@ -1,6 +1,6 @@
 commitlint:
   image:
-    name: commitlint/commitlint:latest
+    name: commitlint/commitlint:18.6.2
     entrypoint: [""]
   interruptible: true
   rules:
diff --git a/template/[% if repo_host_type == 'gitlab.com' or repo_host_type == 'gitlab-self-managed' %].gitlab[% endif %]/workflows/devcontainer.yml.jinja b/template/[% if repo_host_type == 'gitlab.com' or repo_host_type == 'gitlab-self-managed' %].gitlab[% endif %]/workflows/devcontainer.yml.jinja
index abf7a0d1..392fbc52 100644
--- a/template/[% if repo_host_type == 'gitlab.com' or repo_host_type == 'gitlab-self-managed' %].gitlab[% endif %]/workflows/devcontainer.yml.jinja	
+++ b/template/[% if repo_host_type == 'gitlab.com' or repo_host_type == 'gitlab-self-managed' %].gitlab[% endif %]/workflows/devcontainer.yml.jinja	
@@ -1,6 +1,6 @@
 [% from pathjoin("includes", "version_compare.jinja") import version_between -%]
 dev-container-publish:
-  image: docker:latest
+  image: docker:25.0.3
   parallel:
     matrix:
       - PYTHON_VERSION:
@@ -40,7 +40,7 @@ dev-container-publish:
         --tag ${CI_REGISTRY_IMAGE}/dev:py${PYTHON_VERSION} \
         --target dev
   services:
-    - docker:dind
+    - docker:25.0.3-dind
   stage: build
   variables:
     DOCKER_TLS_CERTDIR: /certs
diff --git a/template/[% if repo_host_type == 'gitlab.com' or repo_host_type == 'gitlab-self-managed' %].gitlab[% endif %]/workflows/release.yml.jinja b/template/[% if repo_host_type == 'gitlab.com' or repo_host_type == 'gitlab-self-managed' %].gitlab[% endif %]/workflows/release.yml.jinja
index 46b5f125..e38b0135 100644
--- a/template/[% if repo_host_type == 'gitlab.com' or repo_host_type == 'gitlab-self-managed' %].gitlab[% endif %]/workflows/release.yml.jinja	
+++ b/template/[% if repo_host_type == 'gitlab.com' or repo_host_type == 'gitlab-self-managed' %].gitlab[% endif %]/workflows/release.yml.jinja	
@@ -13,7 +13,7 @@ pages-build:
     - make release-notes > release-notes.md
   stage: release
 release-publish:
-  image: registry.gitlab.com/gitlab-org/release-cli:latest
+  image: registry.gitlab.com/gitlab-org/release-cli:v0.16.0
   needs:
     - pages-build
   release:
@@ -25,7 +25,7 @@ release-publish:
     - echo "Running the release job."
   stage: release
 container-publish:
-  image: docker:latest
+  image: docker:25.0.3
   needs:
     - release-publish
   parallel:
@@ -76,7 +76,7 @@ container-publish:
         --tag ${CI_REGISTRY_IMAGE}:py${PYTHON_VERSION}-${CI_COMMIT_TAG} \
         --target prod
   services:
-    - docker:dind
+    - docker:25.0.3-dind
   stage: release
   variables:
     DOCKER_TLS_CERTDIR: /certs