diff --git a/.github/workflows/cr-comment.yml b/.github/workflows/cr-comment.yml
index 203b7e11a252..625035d1396b 100644
--- a/.github/workflows/cr-comment.yml
+++ b/.github/workflows/cr-comment.yml
@@ -1,4 +1,4 @@
-name: Add continuous release label
+name: 🔖 Add continuous release label
 
 on:
   issue_comment:
diff --git a/.github/workflows/cr.yml b/.github/workflows/cr.yml
index b8b833ef2f72..040b30c076f0 100644
--- a/.github/workflows/cr.yml
+++ b/.github/workflows/cr.yml
@@ -1,8 +1,10 @@
-name: CR
+name: 🔄 CR
 
 env:
   PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD: '1'
 
+permissions: {}
+
 on:
   pull_request:
     branches: [main]
@@ -24,8 +26,6 @@ on:
     tags-ignore:
       - '*'
 
-permissions: {}
-
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.number }}
   cancel-in-progress: true
@@ -36,12 +36,25 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v3
-      - uses: actions/setup-node@v4
+      - name: 📥 Checkout
+        uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+
+      - name: 📦 Setup pnpm
+        uses: pnpm/action-setup@v3
+
+      - name: 🛠️ Setup Node.js
+        uses: actions/setup-node@v4
         with:
           node-version: 22
           cache: pnpm
-      - run: pnpm install
-      - run: pnpm build
-      - run: npx pkg-pr-new publish --compact --no-template --pnpm
+
+      - name: 📦 Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: 🛠️ Build
+        run: pnpm build
+
+      - name: 🚀 Publish Package
+        run: npx pkg-pr-new publish --compact --no-template --pnpm
diff --git a/.github/workflows/lock-threads.yml b/.github/workflows/lock-threads.yml
index c76a2acbbe50..c4494e89c048 100644
--- a/.github/workflows/lock-threads.yml
+++ b/.github/workflows/lock-threads.yml
@@ -1,4 +1,4 @@
-name: Lock Threads
+name: 🔒 Lock Threads
 
 on:
   schedule:
diff --git a/.github/workflows/release-tag.yml b/.github/workflows/release-tag.yml
index 84a034870610..65f1100f102f 100644
--- a/.github/workflows/release-tag.yml
+++ b/.github/workflows/release-tag.yml
@@ -1,4 +1,6 @@
-name: Release
+name: 🚀 Release
+
+permissions: {}
 
 on:
   push:
@@ -11,15 +13,11 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Create Release for Tag
+      - name: 🔖 Create Release for Tag
         id: release_tag
         uses: yyx990803/release-tag@master
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
           tag_name: ${{ github.ref }}
-          body: |
-            Please refer to [CHANGELOG.md](https://github.com/${{ github.repository }}/blob/main/CHANGELOG.md) for details.
+          body: Please refer to [CHANGELOG.md](https://github.com/${{ github.repository }}/blob/main/CHANGELOG.md) for details.
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index f5826155df41..0c723d665f0b 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -1,4 +1,9 @@
-name: Close stale issues and PRs
+name: ⛔ Close stale issues and PRs
+
+permissions:
+  issues: write
+  pull-requests: write
+
 on:
   workflow_dispatch:
 
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 51d3fffe8509..68782d19c463 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -1,4 +1,4 @@
-name: Test
+name: 🧪 Test
 
 on:
   push:
@@ -26,25 +26,27 @@ jobs:
     runs-on: ${{ matrix.os }}
 
     steps:
-      - name: Checkout
+      - name: 📥 Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
-      - name: Install pnpm
+      - name: 📦 Install pnpm
         uses: pnpm/action-setup@v3
 
-      - name: Set node version to ${{ matrix.node_version }}
+      - name: 🛠️ Set node version to ${{ matrix.node_version }}
         uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node_version }}
           cache: pnpm
 
-      - name: Install deps
+      - name: 📦 Install dependencies
         run: pnpm install
         env:
           PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD: 1
 
-      - name: Install Playwright
+      - name: 🎭 Install Playwright
         run: pnpm playwright install chromium
 
-      - name: Check
+      - name: ✅ Check
         run: pnpm check
diff --git a/README.md b/README.md
index 134226a4966c..44e65e7c52c2 100644
--- a/README.md
+++ b/README.md
@@ -19,7 +19,7 @@ Detailed changes for each release are documented in the [CHANGELOG](https://gith
 
 ## Contribution
 
-Please make sure to read the [Contributing Guide](https://github.com/vuejs/vitepress/blob/main/.github/contributing.md) before making a pull request.
+Please make sure to read the [Contributing Guide](https://github.com/vuejs/vitepress/blob/main/contributing.md) before making a pull request.
 
 ## License