diff --git a/.github/workflows/cr-comment.yml b/.github/workflows/cr-comment.yml
index 203b7e11..625035d1 100644
--- a/.github/workflows/cr-comment.yml
+++ b/.github/workflows/cr-comment.yml
@@ -1,4 +1,4 @@
-name: Add continuous release label
+name: 🔖 Add continuous release label
 
 on:
   issue_comment:
diff --git a/.github/workflows/cr.yml b/.github/workflows/cr.yml
index b8b833ef..674a8552 100644
--- a/.github/workflows/cr.yml
+++ b/.github/workflows/cr.yml
@@ -1,8 +1,12 @@
-name: CR
+name: 🔄 CR
 
 env:
   PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD: '1'
 
+permissions:
+  contents: read
+  packages: write
+
 on:
   pull_request:
     branches: [main]
@@ -24,8 +28,6 @@ on:
     tags-ignore:
       - '*'
 
-permissions: {}
-
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.number }}
   cancel-in-progress: true
@@ -36,12 +38,26 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v3
-      - uses: actions/setup-node@v4
+      - name: 📥 Checkout
+        uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+
+      - name: 📦 Setup pnpm
+        uses: pnpm/action-setup@v3
+
+      - name: 🛠️ Setup Node.js
+        uses: actions/setup-node@v4
         with:
           node-version: 22
           cache: pnpm
-      - run: pnpm install
-      - run: pnpm build
-      - run: npx pkg-pr-new publish --compact --no-template --pnpm
+          cache-dependency-path: pnpm-lock.yaml
+
+      - name: 📦 Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: 🛠️ Build
+        run: pnpm build
+
+      - name: 🚀 Publish Package
+        run: npx pkg-pr-new publish --compact --no-template --pnpm
diff --git a/.github/workflows/lock-threads.yml b/.github/workflows/lock-threads.yml
index c76a2acb..c4494e89 100644
--- a/.github/workflows/lock-threads.yml
+++ b/.github/workflows/lock-threads.yml
@@ -1,4 +1,4 @@
-name: Lock Threads
+name: 🔒 Lock Threads
 
 on:
   schedule:
diff --git a/.github/workflows/release-tag.yml b/.github/workflows/release-tag.yml
index 84a03487..8013a204 100644
--- a/.github/workflows/release-tag.yml
+++ b/.github/workflows/release-tag.yml
@@ -1,4 +1,9 @@
-name: Release
+name: 🚀 Release
+
+permissions:
+  contents: write
+  issues: write
+  pull-requests: write
 
 on:
   push:
@@ -11,10 +16,12 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - name: Checkout
+      - name: 📥 Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: true
 
-      - name: Create Release for Tag
+      - name: 🔖 Create Release for Tag
         id: release_tag
         uses: yyx990803/release-tag@master
         env:
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index f5826155..0c723d66 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -1,4 +1,9 @@
-name: Close stale issues and PRs
+name: ⛔ Close stale issues and PRs
+
+permissions:
+  issues: write
+  pull-requests: write
+
 on:
   workflow_dispatch:
 
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 51d3fffe..68782d19 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -1,4 +1,4 @@
-name: Test
+name: 🧪 Test
 
 on:
   push:
@@ -26,25 +26,27 @@ jobs:
     runs-on: ${{ matrix.os }}
 
     steps:
-      - name: Checkout
+      - name: 📥 Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
-      - name: Install pnpm
+      - name: 📦 Install pnpm
         uses: pnpm/action-setup@v3
 
-      - name: Set node version to ${{ matrix.node_version }}
+      - name: 🛠️ Set node version to ${{ matrix.node_version }}
         uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node_version }}
           cache: pnpm
 
-      - name: Install deps
+      - name: 📦 Install dependencies
         run: pnpm install
         env:
           PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD: 1
 
-      - name: Install Playwright
+      - name: 🎭 Install Playwright
         run: pnpm playwright install chromium
 
-      - name: Check
+      - name: ✅ Check
         run: pnpm check
diff --git a/.github/contributing.md b/CONTRIBUTING.md
similarity index 100%
rename from .github/contributing.md
rename to CONTRIBUTING.md
diff --git a/README.md b/README.md
index 134226a4..44e65e7c 100644
--- a/README.md
+++ b/README.md
@@ -19,7 +19,7 @@ Detailed changes for each release are documented in the [CHANGELOG](https://gith
 
 ## Contribution
 
-Please make sure to read the [Contributing Guide](https://github.com/vuejs/vitepress/blob/main/.github/contributing.md) before making a pull request.
+Please make sure to read the [Contributing Guide](https://github.com/vuejs/vitepress/blob/main/contributing.md) before making a pull request.
 
 ## License