diff --git a/.github/workflows/bigtable-conformance.yaml b/.github/workflows/bigtable-conformance.yaml
index 307ab226f28e..3bf8c461be24 100644
--- a/.github/workflows/bigtable-conformance.yaml
+++ b/.github/workflows/bigtable-conformance.yaml
@@ -68,7 +68,7 @@ jobs:
         ref: ${{ matrix.test-version }}
         path: packages/google-cloud-bigtable/cloud-bigtable-clients-test
         persist-credentials: false
-    - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+    - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
       with:
         python-version: ${{ matrix.py-version }}
     - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
diff --git a/.github/workflows/django-spanner-django5.2_tests.yml b/.github/workflows/django-spanner-django5.2_tests.yml
index 6e8fcb1aa583..aa7505cfbd40 100644
--- a/.github/workflows/django-spanner-django5.2_tests.yml
+++ b/.github/workflows/django-spanner-django5.2_tests.yml
@@ -81,7 +81,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "3.15"
       - name: Run Django tests
diff --git a/.github/workflows/django-spanner-django6.0_tests.yml b/.github/workflows/django-spanner-django6.0_tests.yml
index 4f0515222386..bb08de8d5007 100644
--- a/.github/workflows/django-spanner-django6.0_tests.yml
+++ b/.github/workflows/django-spanner-django6.0_tests.yml
@@ -77,7 +77,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "3.15"
       - name: Run Django tests
diff --git a/.github/workflows/django-spanner-foreign_keys.yaml b/.github/workflows/django-spanner-foreign_keys.yaml
index 7cb78a97572a..4d38d2495490 100644
--- a/.github/workflows/django-spanner-foreign_keys.yaml
+++ b/.github/workflows/django-spanner-foreign_keys.yaml
@@ -56,7 +56,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: ${{ matrix.python-version }}
       - name: Run Django foreign key test
diff --git a/.github/workflows/django-spanner-integration-tests-against-emulator-3.10.yml b/.github/workflows/django-spanner-integration-tests-against-emulator-3.10.yml
index 134b088ffe0c..5b39cb24c34f 100644
--- a/.github/workflows/django-spanner-integration-tests-against-emulator-3.10.yml
+++ b/.github/workflows/django-spanner-integration-tests-against-emulator-3.10.yml
@@ -57,7 +57,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install nox
diff --git a/.github/workflows/django-spanner-mockserver-tests.yml b/.github/workflows/django-spanner-mockserver-tests.yml
index 42f1a49d6f29..14151ca95dcf 100644
--- a/.github/workflows/django-spanner-mockserver-tests.yml
+++ b/.github/workflows/django-spanner-mockserver-tests.yml
@@ -46,9 +46,9 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up Python 3.12
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
-          python-version: "3.15"
+          python-version: "3.12"
       - name: Install nox
         run: python -m pip install nox
       - name: Run nox
diff --git a/.github/workflows/gapic-generator-tests.yml b/.github/workflows/gapic-generator-tests.yml
index 642ee0b476a3..70536daadcd8 100644
--- a/.github/workflows/gapic-generator-tests.yml
+++ b/.github/workflows/gapic-generator-tests.yml
@@ -67,7 +67,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "${{ matrix.python }}"
           allow-prereleases: true
@@ -107,7 +107,7 @@ jobs:
           with:
             persist-credentials: false
         - name: Set up Python "${{ matrix.python }}"
-          uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+          uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
           with:
             python-version: "${{ matrix.python }}"
             cache: 'pip'
@@ -163,7 +163,7 @@ jobs:
           with:
             persist-credentials: false
         - name: Set up Python "${{ matrix.python }}"
-          uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+          uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
           with:
             python-version: "${{ matrix.python }}"
             cache: 'pip'
@@ -213,7 +213,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: ${{ needs.python_config.outputs.latest_stable_python }}
       - name: Install System Deps
@@ -232,7 +232,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: ${{ needs.python_config.outputs.latest_stable_python }}
       - name: Install System Deps
@@ -253,7 +253,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: ${{ needs.python_config.outputs.latest_stable_python }}
       - name: Install System Deps
@@ -289,7 +289,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up Python ${{ needs.python_config.outputs.prerelease_python }}
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: ${{ needs.python_config.outputs.prerelease_python }}
           allow-prereleases: true
@@ -321,7 +321,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: ${{ matrix.python }}
           allow-prereleases: true
diff --git a/.github/workflows/import-profiler.yml b/.github/workflows/import-profiler.yml
index ccee981b8767..fd5c058960d1 100644
--- a/.github/workflows/import-profiler.yml
+++ b/.github/workflows/import-profiler.yml
@@ -40,7 +40,7 @@ jobs:
           echo "is_full_run=false" >> $GITHUB_OUTPUT
         fi
     - name: Setup Python
-      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
       with:
         python-version: "3.15"
     - name: Get package shards
@@ -73,7 +73,7 @@ jobs:
         fetch-depth: 2
         persist-credentials: false
     - name: Setup Python
-      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
       with:
         python-version: "3.15"
         allow-prereleases: true
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 9075320cfa07..2b2af85d4d66 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -48,7 +48,7 @@ jobs:
           echo "is_full_run=false" >> $GITHUB_OUTPUT
         fi
     - name: Setup Python
-      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
       with:
         python-version: "3.15"
     - name: Get package shards
@@ -83,7 +83,7 @@ jobs:
           echo "is_full_run=false" >> $GITHUB_OUTPUT
         fi
     - name: Setup Python
-      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
       with:
         python-version: "3.15"
     - name: Install nox
@@ -140,7 +140,7 @@ jobs:
         fetch-depth: 2
         persist-credentials: false
     - name: Setup Python
-      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
       with:
         python-version: "3.15"
     - name: Install nox
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 767e26d4e67d..ebd4457201b8 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -44,7 +44,7 @@ jobs:
           fetch-depth: 2
           persist-credentials: false
       - name: Set up Python 3.10
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "3.15"
       - name: Install script dependencies
diff --git a/.github/workflows/prerelease-deps.yml b/.github/workflows/prerelease-deps.yml
index 37c7e3393d3d..65bda3ab38e1 100644
--- a/.github/workflows/prerelease-deps.yml
+++ b/.github/workflows/prerelease-deps.yml
@@ -58,7 +58,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: ${{ env.PY_VERSION }}
           allow-prereleases: true
diff --git a/.github/workflows/regenerate-all.yml b/.github/workflows/regenerate-all.yml
index cd53fc845834..b4eea4ddd7fc 100644
--- a/.github/workflows/regenerate-all.yml
+++ b/.github/workflows/regenerate-all.yml
@@ -37,7 +37,7 @@ jobs:
               - '.librarian/**'
 
       - name: Setup Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "3.15"
 
diff --git a/.github/workflows/spanner-mockserver-tests.yml b/.github/workflows/spanner-mockserver-tests.yml
index 35b65b8b2669..0e702c5b832f 100644
--- a/.github/workflows/spanner-mockserver-tests.yml
+++ b/.github/workflows/spanner-mockserver-tests.yml
@@ -50,7 +50,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up Python 3.12
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "3.15"
       - name: Install nox
diff --git a/.github/workflows/sqlalchemy-spanner-compliance-tests-against-emulator.yml b/.github/workflows/sqlalchemy-spanner-compliance-tests-against-emulator.yml
index d7017f45561c..1d17026b711e 100644
--- a/.github/workflows/sqlalchemy-spanner-compliance-tests-against-emulator.yml
+++ b/.github/workflows/sqlalchemy-spanner-compliance-tests-against-emulator.yml
@@ -53,7 +53,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up Python 3.14
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "3.15"
       - name: Install nox
diff --git a/.github/workflows/version_scanner.yml b/.github/workflows/version_scanner.yml
index eb67ae9fede2..b2ccf6df36cd 100644
--- a/.github/workflows/version_scanner.yml
+++ b/.github/workflows/version_scanner.yml
@@ -23,7 +23,7 @@ jobs:
           persist-credentials: false
       
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: '3.15'