diff --git a/.github/workflows/ci_install_script.yml b/.github/workflows/ci_install_script.yml
index 9426ac816..36fa578dc 100644
--- a/.github/workflows/ci_install_script.yml
+++ b/.github/workflows/ci_install_script.yml
@@ -12,6 +12,10 @@ on:
 permissions:
   contents: read
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
 jobs:
   detect-changes:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/ci_nix.yml b/.github/workflows/ci_nix.yml
index b58aa3cbb..b309e7a87 100644
--- a/.github/workflows/ci_nix.yml
+++ b/.github/workflows/ci_nix.yml
@@ -11,6 +11,10 @@ on:
 permissions:
   contents: read
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
 jobs:
   detect-changes:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/ci_python.yml b/.github/workflows/ci_python.yml
index a245cfa74..7dac34cbf 100644
--- a/.github/workflows/ci_python.yml
+++ b/.github/workflows/ci_python.yml
@@ -12,6 +12,10 @@ on:
 permissions:
   contents: read
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
 env:
   TOMBI_CACHE_HOME: ${{ github.workspace }}/.cache/tombi
 
diff --git a/.github/workflows/ci_rust.yml b/.github/workflows/ci_rust.yml
index 4334e7142..50beea4da 100644
--- a/.github/workflows/ci_rust.yml
+++ b/.github/workflows/ci_rust.yml
@@ -11,6 +11,10 @@ on:
 permissions:
   contents: read
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
 env:
   CARGO_TERM_COLOR: always
   CARGO_INCREMENTAL: 0
diff --git a/.github/workflows/ci_vscode_extensions.yml b/.github/workflows/ci_vscode_extensions.yml
index cea950db5..02374766e 100644
--- a/.github/workflows/ci_vscode_extensions.yml
+++ b/.github/workflows/ci_vscode_extensions.yml
@@ -12,6 +12,10 @@ on:
 permissions:
   contents: read
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
 jobs:
   detect-changes:
     runs-on: ubuntu-latest
@@ -56,7 +60,7 @@ jobs:
         with:
           node-version-file: '.node-version'
           cache: 'pnpm'
-      - run: pnpm install
+      - run: pnpm install --frozen-lockfile
       - name: Check Biome schema version
         run: |
           node <<'NODE'
diff --git a/.github/workflows/ci_winget_manifest.yml b/.github/workflows/ci_winget_manifest.yml
index 7ad29416c..cff809f80 100644
--- a/.github/workflows/ci_winget_manifest.yml
+++ b/.github/workflows/ci_winget_manifest.yml
@@ -14,6 +14,10 @@ on:
 permissions:
   contents: read
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
 env:
   WINGETCREATE_VERSION: 1.12.8.0
 
diff --git a/.github/workflows/toml-test.yml b/.github/workflows/toml-test.yml
index bcc63b421..a90b15f42 100644
--- a/.github/workflows/toml-test.yml
+++ b/.github/workflows/toml-test.yml
@@ -9,6 +9,10 @@ on:
 permissions:
   contents: read
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
 jobs:
   detect-changes:
     runs-on: ubuntu-latest