diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 88d58269e9..7fa136c3f1 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -13,7 +13,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: ./.github/actions/setup
         with:
           extras: "-E pandas"
@@ -33,7 +33,7 @@ jobs:
   build_docs:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: ./.github/actions/setup
       - name: Build docs
         run: cd docs && make html SPHINXOPTS="-W --keep-going"
@@ -41,7 +41,7 @@ jobs:
   build_package:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: ./.github/actions/setup
       - name: Build package
         run: poetry build
@@ -49,7 +49,7 @@ jobs:
   test_core:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: ./.github/actions/setup
       - name: Test core
         run: pytest tests/tests_unit -n6 --dist loadscope --maxfail 10 -m 'not dsl' --test-deps-only-core
@@ -62,7 +62,7 @@ jobs:
         os: [ubuntu-latest, windows-latest]
         python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: ./.github/actions/setup
         with:
           python_version: ${{ matrix.python-version }}
diff --git a/.github/workflows/cdf_auth.yaml b/.github/workflows/cdf_auth.yaml
index 29650199df..a1772a5bea 100644
--- a/.github/workflows/cdf_auth.yaml
+++ b/.github/workflows/cdf_auth.yaml
@@ -24,7 +24,7 @@ jobs:
         PROVIDER: "entra_id"
         LOGIN_FLOW: "client_credentials"
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: Build the CDF Groups
         working-directory: scripts/toolkit
         run: cdf build --env ${{ matrix.cdf_project }}
diff --git a/.github/workflows/release-pypi-v8.yaml b/.github/workflows/release-pypi-v8.yaml
index 8b6ee71d7f..d36c5ff2bc 100644
--- a/.github/workflows/release-pypi-v8.yaml
+++ b/.github/workflows/release-pypi-v8.yaml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     environment: CD
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
+      - uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
 
       - uses: ./.github/actions/setup
 
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index db20e4c55e..68d88039a9 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -11,7 +11,7 @@ jobs:
     runs-on: windows-latest
     environment: CD
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: ./.github/actions/setup
         with:
           extras: '-E all'
diff --git a/.github/workflows/verify-jupyter.yml b/.github/workflows/verify-jupyter.yml
index b4db77e323..5ca2322d1c 100644
--- a/.github/workflows/verify-jupyter.yml
+++ b/.github/workflows/verify-jupyter.yml
@@ -9,7 +9,7 @@ jobs:
   build_and_test_jupyter_pyodide:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6
         with:
           python-version: '3.10'
diff --git a/.github/workflows/verify-streamlit.yml b/.github/workflows/verify-streamlit.yml
index 156f1eae30..633e95ad71 100644
--- a/.github/workflows/verify-streamlit.yml
+++ b/.github/workflows/verify-streamlit.yml
@@ -9,7 +9,7 @@ jobs:
   build_and_test_streamlit_pyodide:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6
         with:
           python-version: '3.10'