diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 0a3333af..dafb0483 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -13,13 +13,13 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@4f1f4aec02e41874fa0262ea8ff5172d7978ad1e
       - name: Prepare for build
         run: |
           bazel/setup-ci.sh
           mkdir -p editors/code/dist
-        env:
-          BUILDBUDDY_API_KEY: ${{ secrets.BUILDBUDDY_API_KEY }}
+        # env:
+        #   BUILDBUDDY_API_KEY: ${{ secrets.BUILDBUDDY_API_KEY }}
       - name: Build
         run: bazel build //...
       - name: Run tests
@@ -28,17 +28,17 @@ jobs:
   build-windows:
     runs-on: windows-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@4f1f4aec02e41874fa0262ea8ff5172d7978ad1e
       - name: Prepare for build
         run: |
-          echo 'import %workspace%/bazel/remote-cache.bazelrc' >>.bazelrc
-          echo "build --remote_header=x-buildbuddy-api-key=$BUILDBUDDY_API_KEY" >>.bazelrc
+          # echo 'import %workspace%/bazel/remote-cache.bazelrc' >>.bazelrc
+          # echo "build --remote_header=x-buildbuddy-api-key=$BUILDBUDDY_API_KEY" >>.bazelrc
           echo "startup --output_user_root=C:/b" >>.bazelrc
           echo "startup --windows_enable_symlinks" >>.bazelrc
           mkdir -p editors/code/dist
         shell: bash
-        env:
-          BUILDBUDDY_API_KEY: ${{ secrets.BUILDBUDDY_API_KEY }}
+        # env:
+        #   BUILDBUDDY_API_KEY: ${{ secrets.BUILDBUDDY_API_KEY }}
       - name: Build
         run: bazel build //crates/...
       - name: Run tests
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 840ca24a..e169879b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -16,23 +16,21 @@ jobs:
             runs-on: ubuntu-latest
           - name: linux-aarch64
             runs-on: ubuntu-latest
-          - name: darwin-amd64
-            runs-on: macos-13
           - name: darwin-arm64
-            runs-on: macos-14
+            runs-on: macos-15
       fail-fast: true
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@4f1f4aec02e41874fa0262ea8ff5172d7978ad1e
       - name: Prepare for build
         run: |
           bazel/setup-ci.sh
           mkdir -p editors/code/dist
-        env:
-          BUILDBUDDY_API_KEY: ${{ secrets.BUILDBUDDY_API_KEY }}
+        # env:
+        #   BUILDBUDDY_API_KEY: ${{ secrets.BUILDBUDDY_API_KEY }}
       - name: Build
         run: bazel build -c opt ${{ matrix.target.name == 'linux-aarch64' && '--platforms @zig_sdk//platform:linux_arm64' || '' }} //crates/starpls
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
         with:
           name: starpls-${{ matrix.target.name }}
           path: bazel-bin/crates/starpls/starpls
@@ -41,20 +39,20 @@ jobs:
     name: Build (Windows)
     runs-on: windows-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@4f1f4aec02e41874fa0262ea8ff5172d7978ad1e
       - name: Prepare for build
         run: |
-          echo 'import %workspace%/bazel/remote-cache.bazelrc' >>.bazelrc
-          echo "build --remote_header=x-buildbuddy-api-key=$BUILDBUDDY_API_KEY" >>.bazelrc
+          # echo 'import %workspace%/bazel/remote-cache.bazelrc' >>.bazelrc
+          # echo "build --remote_header=x-buildbuddy-api-key=$BUILDBUDDY_API_KEY" >>.bazelrc
           echo "startup --output_user_root=C:/b" >>.bazelrc
           echo "startup --windows_enable_symlinks" >>.bazelrc
           mkdir -p editors/code/dist
         shell: bash
-        env:
-          BUILDBUDDY_API_KEY: ${{ secrets.BUILDBUDDY_API_KEY }}
+        # env:
+        #   BUILDBUDDY_API_KEY: ${{ secrets.BUILDBUDDY_API_KEY }}
       - name: Build
         run: bazel build -c opt //crates/starpls
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
         with:
           name: starpls-windows-amd64
           path: bazel-bin/crates/starpls/starpls.exe
@@ -66,8 +64,8 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/download-artifact@v4
+      - uses: actions/checkout@4f1f4aec02e41874fa0262ea8ff5172d7978ad1e
+      - uses: actions/download-artifact@484a0b528fb4d7bd804637ccb632e47a0e638317
         with:
           path: artifacts
           pattern: starpls-*
@@ -87,7 +85,7 @@ jobs:
           cp starpls-linux-aarch64 starpls && tar -czvf starpls-linux-aarch64.tar.gz starpls && rm starpls
           cp starpls-linux-amd64 starpls && tar -czvf starpls-linux-amd64.tar.gz starpls && rm starpls
           cp starpls-darwin-amd64 starpls && tar -czvf starpls-darwin-amd64.tar.gz starpls && rm starpls
-          cp starpls-darwin-arm64 starpls && tar -czvf starpls-darwin-arm64.tar.gz starpls && rm starpls
+          cp starpls-darwin-arm64 starpls && tar -czvf starplload_bazel_build_languages-darwin-arm64.tar.gz starpls && rm starpls
           cp starpls-windows-amd64.exe starpls.exe && zip starpls-windows-amd64.zip starpls.exe && rm starpls.exe
       - name: Show release artifacts
         run: find release
diff --git a/bazel/setup-ci.sh b/bazel/setup-ci.sh
index 19fa5c4e..c2994ed4 100755
--- a/bazel/setup-ci.sh
+++ b/bazel/setup-ci.sh
@@ -1,3 +1,5 @@
 #!/usr/bin/env bash
-echo 'import %workspace%/bazel/remote-cache.bazelrc' >>.bazelrc
-echo "build --remote_header=x-buildbuddy-api-key=$BUILDBUDDY_API_KEY" >>.bazelrc
+if [[ -n "$BUILDBUDDY_API_KEY" ]]; then
+  echo 'import %workspace%/bazel/remote-cache.bazelrc' >>.bazelrc
+  echo "build --remote_header=x-buildbuddy-api-key=$BUILDBUDDY_API_KEY" >>.bazelrc
+fi