diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index a1c388df..d1f18eb2 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -18,7 +18,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       with:
         # We must fetch at least the immediate parents so that if this is
         # a pull request then we can checkout the head.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 44b2f60f..a8b31c58 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,7 +18,7 @@ jobs:
     name: release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - uses: actions/setup-node@v6
         with:
           node-version: lts/*
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 72f6c872..37a2b854 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -22,7 +22,7 @@ jobs:
           - 22
           - 24
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - name: Test with Node.js ${{ matrix.node_version }}
         uses: actions/setup-node@v6
         with:
@@ -38,7 +38,7 @@ jobs:
     steps:
       - run: exit 1
         if: ${{ needs.test_matrix.result != 'success' }}
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - run: npm ci
       - run: npm run lint
       - run: npm run test:typescript
diff --git a/.github/workflows/update-docs.yml b/.github/workflows/update-docs.yml
index fbb323cf..96092d55 100644
--- a/.github/workflows/update-docs.yml
+++ b/.github/workflows/update-docs.yml
@@ -12,7 +12,7 @@ jobs:
         with:
           app-id: ${{ vars.OCTOKIT_APP_ID }}
           private-key: ${{ secrets.OCTOKIT_APP_PRIVATE_KEY }}
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - uses: actions/setup-node@v6
         with:
           node-version: 24
diff --git a/.github/workflows/update-prettier.yml b/.github/workflows/update-prettier.yml
index 1a3e957e..da966abb 100644
--- a/.github/workflows/update-prettier.yml
+++ b/.github/workflows/update-prettier.yml
@@ -12,7 +12,7 @@ jobs:
         with:
           app-id: ${{ vars.OCTOKIT_APP_ID }}
           private-key: ${{ secrets.OCTOKIT_APP_PRIVATE_KEY }}
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - uses: actions/setup-node@v6
         with:
           cache: npm