diff --git a/.github/workflows/ci-knip.yml b/.github/workflows/ci-knip.yml
index 963ddf8..42c4702 100644
--- a/.github/workflows/ci-knip.yml
+++ b/.github/workflows/ci-knip.yml
@@ -25,7 +25,7 @@ jobs:
       if: github.event.pull_request.head.repo.full_name == github.repository
       steps:
         - name: Checkout Repo
-          uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+          uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
           with:
             ref: ${{ github.head_ref }}
             token: ${{ secrets.STUDIOCMS_SERVICE_TOKEN }}
diff --git a/.github/workflows/ci-labeler.yml b/.github/workflows/ci-labeler.yml
index 005df4a..eb60a6a 100644
--- a/.github/workflows/ci-labeler.yml
+++ b/.github/workflows/ci-labeler.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Label PRs
-        uses: actions/labeler@v5
+        uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1
         with:
           repo-token: "${{ secrets.STUDIOCMS_SERVICE_TOKEN }}"
           configuration-path: .github/labeler.yml
diff --git a/.github/workflows/ci-pr-snapshots.yml b/.github/workflows/ci-pr-snapshots.yml
index 96739c4..eeeff0d 100644
--- a/.github/workflows/ci-pr-snapshots.yml
+++ b/.github/workflows/ci-pr-snapshots.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Install Tools & Dependencies
         uses: withstudiocms/automations/.github/actions/install@main
diff --git a/.github/workflows/ci-push-main.yml b/.github/workflows/ci-push-main.yml
index ae7e504..eb4842c 100644
--- a/.github/workflows/ci-push-main.yml
+++ b/.github/workflows/ci-push-main.yml
@@ -30,7 +30,7 @@ jobs:
       NODE_OPTIONS: "--max_old_space_size=4096"
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           ref: ${{ github.head_ref }}
           token: ${{ secrets.STUDIOCMS_SERVICE_TOKEN }}
@@ -42,7 +42,7 @@ jobs:
         run: pnpm run lint:fix
 
       - name: Commit changes
-        uses: stefanzweifel/git-auto-commit-action@8621497c8c39c72f3e2a999a26b4ca1b5058a842 # v5
+        uses: stefanzweifel/git-auto-commit-action@04702edda442b2e678b25b537cec683a1493fcb9 # v7.1.0
         with:
           commit_message: '[ci] lint'
           branch: ${{ github.head_ref }}
@@ -55,7 +55,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
   
       - name: Run Todo Issue Bot
         uses: juulsn/todo-issue@main
@@ -77,7 +77,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Install Tools & Dependencies
         uses: withstudiocms/automations/.github/actions/install@main
diff --git a/.github/workflows/coauthor.yml b/.github/workflows/coauthor.yml
index 476c2ac..e31875d 100644
--- a/.github/workflows/coauthor.yml
+++ b/.github/workflows/coauthor.yml
@@ -14,5 +14,5 @@ jobs:
     if: ${{ github.event.issue.pull_request }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: kevinzunigacuellar/coauthor-action@292b32bdbffc663431a2a37b3bfa597d83a74905 # v0.1.3
\ No newline at end of file