diff --git a/.github/workflows/dependabot-changelog.yaml b/.github/workflows/dependabot-changelog.yaml
index dfc76b5..a7e628d 100644
--- a/.github/workflows/dependabot-changelog.yaml
+++ b/.github/workflows/dependabot-changelog.yaml
@@ -16,7 +16,7 @@ jobs:
         shell: bash
     steps:
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 1
       - uses: octo-sts/action@f603d3be9d8dd9871a265776e625a27b00effe05 # v1.1.1
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index de3a9cd..5fffbf3 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -36,7 +36,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 1
 
diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml
index ff47fbe..d3b7412 100644
--- a/.github/workflows/scorecard.yaml
+++ b/.github/workflows/scorecard.yaml
@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
 
@@ -31,7 +31,7 @@ jobs:
           publish_results: true
 
       - name: Upload sarif
-        uses: github/codeql-action/upload-sarif@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v3.29.5
+        uses: github/codeql-action/upload-sarif@19b2f06db2b6f5108140aeb04014ef02b648f789 # v3.29.5
         with:
           sarif_file: scorecard.sarif
 
diff --git a/.github/workflows/validate-gh-action.yaml b/.github/workflows/validate-gh-action.yaml
index 8a77e7e..65b418b 100644
--- a/.github/workflows/validate-gh-action.yaml
+++ b/.github/workflows/validate-gh-action.yaml
@@ -36,7 +36,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/validate-gh-workflows.yaml b/.github/workflows/validate-gh-workflows.yaml
index bdf1ebf..3eb11a1 100644
--- a/.github/workflows/validate-gh-workflows.yaml
+++ b/.github/workflows/validate-gh-workflows.yaml
@@ -40,7 +40,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
 
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 11aa801..8565b52 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -23,6 +23,8 @@
 - Update _[DavidAnson/markdownlint-cli2-action](https://github.com/davidanson/markdownlint-cli2-action)_ from `21.0.0` to `22.0.0`. ([#82](https://github.com/action-stars/generic-workflows/pull/82)) _@dependabot_
 - Update _github/codeql-action_ from `4.31.7` to `4.31.9`. ([#81](https://github.com/action-stars/generic-workflows/pull/81)) _@dependabot_
 - Update _[actions/upload-artifact](https://github.com/actions/upload-artifact)_ from `5.0.0` to `6.0.0`. ([#83](https://github.com/action-stars/generic-workflows/pull/83)) _@dependabot_
+- Update _actions/checkout_ from `6.0.1` to `6.0.2`. ([#84](https://github.com/action-stars/generic-workflows/pull/84)) _@dependabot_
+- Update _github/codeql-action_ from `4.31.10` to `4.31.11`. ([#84](https://github.com/action-stars/generic-workflows/pull/84)) _@dependabot_
 
 ## [v0.7.4] - 2025-11-26