diff --git a/.github/workflows/cache.yml b/.github/workflows/cache.yml
index ca2472e..e617bc8 100644
--- a/.github/workflows/cache.yml
+++ b/.github/workflows/cache.yml
@@ -6,7 +6,7 @@ on:
   workflow_dispatch:
 jobs:
   cache:
-    runs-on: "runs-on=${{ github.run_id }}/family=g4dn.2xlarge/image=quantecon_ubuntu2404/disk=large"
+    runs-on: "runs-on=${{ github.run_id }}/family=g4dn.2xlarge/image=quantecon_ubuntu2404/volume=80gb/spot=false"
     steps:
       - uses: actions/checkout@v6
         with:
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3abacad..b17ca3f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -2,7 +2,11 @@ name: Build Project [using jupyter-book]
 on: [pull_request]
 jobs:
   preview:
-    runs-on: "runs-on=${{ github.run_id }}/family=g4dn.2xlarge/image=quantecon_ubuntu2404/disk=large"
+    runs-on: "runs-on=${{ github.run_id }}/family=g4dn.2xlarge/image=quantecon_ubuntu2404/volume=80gb/spot=false"
+    permissions:
+      contents: read
+      pull-requests: write
+      actions: read     # dawidd6/action-download-artifact reads the cache.yml build artifact
     steps:
       - uses: actions/checkout@v6
         with:
@@ -35,7 +39,7 @@ jobs:
         shell: bash -l {0}
         run: pip list
       - name: Download "build" folder (cache)
-        uses: dawidd6/action-download-artifact@v9
+        uses: dawidd6/action-download-artifact@v21
         with:
           workflow: cache.yml
           branch: main
@@ -57,7 +61,7 @@ jobs:
       - name: Build PDF from LaTeX
         shell: bash -l {0}
         run: |
-          jb build lectures --builder pdflatex --path-output ./ -W --keep-going
+          jb build lectures --builder pdflatex --path-output ./ -n -W --keep-going
           mkdir -p _build/html/_pdf
           cp -u _build/latex/*.pdf _build/html/_pdf
       - name: Upload Execution Reports (LaTeX)
diff --git a/.github/workflows/collab.yml b/.github/workflows/collab.yml
index 32e1588..a3f0fe5 100644
--- a/.github/workflows/collab.yml
+++ b/.github/workflows/collab.yml
@@ -2,7 +2,11 @@ name: Build Project on Google Collab (Execution)
 on: [pull_request]
 jobs:
   execution-checks:
-    runs-on: "runs-on=${{ github.run_id }}/family=g4dn.2xlarge/image=ubuntu24-gpu-x64/disk=large"
+    runs-on: "runs-on=${{ github.run_id }}/family=g4dn.2xlarge/image=ubuntu24-gpu-x64/volume=80gb/spot=false"
+    permissions:
+      contents: read
+      pull-requests: write
+      actions: read     # dawidd6/action-download-artifact reads the cache.yml build artifact
     container:
       image: docker://us-docker.pkg.dev/colab-images/public/runtime
       options: --gpus all
@@ -22,7 +26,7 @@ jobs:
         shell: bash -l {0}
         run: pip list
       - name: Download "build" folder (cache)
-        uses: dawidd6/action-download-artifact@v3
+        uses: dawidd6/action-download-artifact@v21
         with:
           workflow: cache.yml
           branch: main
diff --git a/.github/workflows/linkcheck.yml b/.github/workflows/linkcheck.yml
index 7336404..f8ac2d5 100644
--- a/.github/workflows/linkcheck.yml
+++ b/.github/workflows/linkcheck.yml
@@ -27,7 +27,7 @@ jobs:
           environment-file: environment.yml
           activate-environment: quantecon
       - name: Download "build" folder (cache)
-        uses: dawidd6/action-download-artifact@v9
+        uses: dawidd6/action-download-artifact@v21
         with:
           workflow: cache.yml
           branch: main
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index afcefd0..cae7931 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -3,10 +3,13 @@ on:
   push:
     tags:
       - 'publish*'
+permissions:
+  contents: write   # peaceiris/actions-gh-pages pushes the built site to gh-pages
+  actions: read     # dawidd6/action-download-artifact reads the cache.yml build artifact
 jobs:
   publish:
     if: github.event_name == 'push' && startsWith(github.event.ref, 'refs/tags')
-    runs-on: "runs-on=${{ github.run_id }}/family=g4dn.2xlarge/image=quantecon_ubuntu2404/disk=large"
+    runs-on: "runs-on=${{ github.run_id }}/family=g4dn.2xlarge/image=quantecon_ubuntu2404/volume=80gb/spot=false"
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -37,7 +40,7 @@ jobs:
         run: pip list
       # Download Build Cache from cache.yml
       - name: Download "build" folder (cache)
-        uses: dawidd6/action-download-artifact@v9
+        uses: dawidd6/action-download-artifact@v21
         with:
           workflow: cache.yml
           branch: main