diff --git a/.changeset/ci-pnpm-setup-pin-comment.md b/.changeset/ci-pnpm-setup-pin-comment.md
new file mode 100644
index 00000000..a845151c
--- /dev/null
+++ b/.changeset/ci-pnpm-setup-pin-comment.md
@@ -0,0 +1,2 @@
+---
+---
diff --git a/.github/workflows/autofix.yml b/.github/workflows/autofix.yml
index c60eded1..6e27e642 100644
--- a/.github/workflows/autofix.yml
+++ b/.github/workflows/autofix.yml
@@ -19,7 +19,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup pnpm + Node.js v24
-        uses: pnpm/setup@fbda4c85fc2e1e08721cd8763afea8f48d60f024 # v3
+        uses: pnpm/setup@fbda4c85fc2e1e08721cd8763afea8f48d60f024 # v3.0.0
         with:
           runtime: node@24
           cache: true
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4c25c75e..ea430a63 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -31,7 +31,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup pnpm + Node.js v24
-        uses: pnpm/setup@fbda4c85fc2e1e08721cd8763afea8f48d60f024 # v3
+        uses: pnpm/setup@fbda4c85fc2e1e08721cd8763afea8f48d60f024 # v3.0.0
         with:
           runtime: node@24
           cache: true
@@ -61,7 +61,7 @@ jobs:
         run: echo "::add-matcher::.github/problemMatchers/tsc.json"
 
       - name: Setup pnpm + Node.js v24
-        uses: pnpm/setup@fbda4c85fc2e1e08721cd8763afea8f48d60f024 # v3
+        uses: pnpm/setup@fbda4c85fc2e1e08721cd8763afea8f48d60f024 # v3.0.0
         with:
           runtime: node@24
           cache: true
@@ -90,7 +90,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup pnpm + Node.js v24
-        uses: pnpm/setup@fbda4c85fc2e1e08721cd8763afea8f48d60f024 # v3
+        uses: pnpm/setup@fbda4c85fc2e1e08721cd8763afea8f48d60f024 # v3.0.0
         with:
           runtime: node@24
           cache: true
@@ -133,7 +133,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup pnpm + Node.js v24
-        uses: pnpm/setup@fbda4c85fc2e1e08721cd8763afea8f48d60f024 # v3
+        uses: pnpm/setup@fbda4c85fc2e1e08721cd8763afea8f48d60f024 # v3.0.0
         with:
           runtime: node@24
           cache: true
@@ -161,7 +161,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup pnpm + Node.js v24
-        uses: pnpm/setup@fbda4c85fc2e1e08721cd8763afea8f48d60f024 # v3
+        uses: pnpm/setup@fbda4c85fc2e1e08721cd8763afea8f48d60f024 # v3.0.0
         with:
           runtime: node@24
           cache: true
diff --git a/.github/workflows/pkg-pr-new.yml b/.github/workflows/pkg-pr-new.yml
index db47c2bf..aa1fbcd1 100644
--- a/.github/workflows/pkg-pr-new.yml
+++ b/.github/workflows/pkg-pr-new.yml
@@ -28,7 +28,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup pnpm + Node.js v24
-        uses: pnpm/setup@fbda4c85fc2e1e08721cd8763afea8f48d60f024 # v3
+        uses: pnpm/setup@fbda4c85fc2e1e08721cd8763afea8f48d60f024 # v3.0.0
         with:
           runtime: node@24
           cache: true