diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index dd26e69..b9ca649 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v6.0.3
       - name: Unshallow clone for tags
         run: git fetch --prune --unshallow --tags
       - name: Install Go Tools
@@ -46,7 +46,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v6.0.3
       - name: Check GoReleaser
         uses: goreleaser/goreleaser-action@v7.2.2
         with:
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 4bbc018..80ab3da 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # tag=v4.2.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # tag=v4.2.2
       - name: Unshallow clone for tags
         run: git fetch --prune --unshallow --tags
       - name: Install pulumictl
@@ -59,7 +59,7 @@ jobs:
     needs: publish_binary
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # tag=v4.2.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # tag=v4.2.2
       - name: Unshallow clone for tags
         run: git fetch --prune --unshallow --tags
       - name: Install Go Tools
diff --git a/.github/workflows/upgrade-provider.yaml b/.github/workflows/upgrade-provider.yaml
index 9601aca..c2fec8b 100644
--- a/.github/workflows/upgrade-provider.yaml
+++ b/.github/workflows/upgrade-provider.yaml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v6.0.2
+      uses: actions/checkout@v6.0.3
     - name: Unshallow clone for tags
       run: git fetch --prune --unshallow --tags
     - name: Install Go Tools