diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index dfd83f8..0fa0425 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -56,18 +56,18 @@ jobs:
           persist-credentials: false
 
       - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@a54c08fd6ec450103756d6dc20d2d48332156d7f # master
+        uses: dtolnay/rust-toolchain@efa25f7f19611383d5b0ccf2d1c8914531636bf9 # master
         with:
           targets: ${{ matrix.target }}
 
       - name: Cache Cargo registry and target
-        uses: Swatinem/rust-cache@23bde28c093e9ae8b3b402174d994c9d924d0eb8 # v2.7.5
+        uses: Swatinem/rust-cache@23bce251a8cd2ffc3c1075eaa2367cf899916d84 # v2.7.3
         with:
           key: ${{ matrix.target }}
 
       - name: Install cross
         if: matrix.use_cross
-        uses: taiki-e/install-action@93a027fc80e60808cf702e5e4fa0eb13e01fccf2 # v2.1.20
+        uses: taiki-e/install-action@d12e869b89167df346dd0ff65da342d1fb1202fb # v2.53.2
         with:
           tool: cross
 
@@ -81,7 +81,7 @@ jobs:
         shell: bash
 
       - name: Upload Binary Artifact
-        uses: actions/upload-artifact@60119845307540294e774020a87424eeac47d7e6 # v4.4.1
+        uses: actions/upload-artifact@0b2256b8c012f0878cc391196ead6427b322a30d # v4.3.3
         with:
           name: kdc-${{ matrix.target }}
           path: target/${{ matrix.target }}/release/${{ matrix.bin_name }}
@@ -119,7 +119,7 @@ jobs:
         shell: bash
 
       - name: Download all artifacts
-        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372ec806f1c # v4.1.7
+        uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
         with:
           path: bin-artifacts
 
@@ -159,7 +159,7 @@ jobs:
           generate_release_notes: true
 
       - name: Upload packaging artifacts
-        uses: actions/upload-artifact@60119845307540294e774020a87424eeac47d7e6 # v4.4.1
+        uses: actions/upload-artifact@0b2256b8c012f0878cc391196ead6427b322a30d # v4.3.3
         with:
           name: release-dist
           path: dist/
@@ -178,13 +178,13 @@ jobs:
           persist-credentials: false
 
       - name: Download release-dist artifact
-        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372ec806f1c # v4.1.7
+        uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
         with:
           name: release-dist
           path: dist
 
       - name: Download compiled binaries
-        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372ec806f1c # v4.1.7
+        uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
         with:
           path: bin-artifacts
 
diff --git a/src/ui/dashboard.rs b/src/ui/dashboard.rs
index 9f91136..e41afb7 100644
--- a/src/ui/dashboard.rs
+++ b/src/ui/dashboard.rs
@@ -975,9 +975,13 @@ mod tests {
     use super::*;
     use ratatui::crossterm::event::KeyCode;
     use ratatui::{backend::TestBackend, Terminal};
+    use std::sync::Mutex;
+
+    static TEST_MUTEX: Mutex<()> = Mutex::new(());
 
     #[test]
     fn test_render_all_phases() {
+        let _guard = TEST_MUTEX.lock().unwrap();
         crate::utils::test_support::set_mock_path();
         let backend = TestBackend::new(120, 40);
         let mut terminal = Terminal::new(backend).unwrap();
@@ -1007,6 +1011,7 @@ mod tests {
 
     #[test]
     fn test_handle_first_launch_key() {
+        let _guard = TEST_MUTEX.lock().unwrap();
         crate::utils::test_support::set_mock_path();
         let mut state = crate::app::startup::initialize(std::path::PathBuf::from(".")).unwrap();
         state.ui.first_launch_choice = 0;
@@ -1024,6 +1029,7 @@ mod tests {
 
     #[test]
     fn test_cycle_theme() {
+        let _guard = TEST_MUTEX.lock().unwrap();
         crate::utils::test_support::set_mock_path();
         let mut state = crate::app::startup::initialize(std::path::PathBuf::from(".")).unwrap();
         let initial_theme = state.ui.active_theme;