diff --git a/.github/workflows/build-llvm-rhel8.yml b/.github/workflows/build-llvm-rhel8.yml
index 24b5e9b..db7dbd2 100644
--- a/.github/workflows/build-llvm-rhel8.yml
+++ b/.github/workflows/build-llvm-rhel8.yml
@@ -39,7 +39,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4.3.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           persist-credentials: false
 
@@ -188,7 +188,7 @@ jobs:
 
     steps:
       - name: Checkout main repo (no submodules)
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4.3.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           persist-credentials: true
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3de0e0b..f3ab04d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,7 +20,7 @@ jobs:
     env:
       FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4.3.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           persist-credentials: false
       - run: git submodule update --init tools prebuilt
@@ -47,7 +47,7 @@ jobs:
           - os: windows-latest
             binary: prebuilt/bin/devkit-server-windows-amd64.exe
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4.3.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           persist-credentials: false
       - run: git submodule update --init tools prebuilt
diff --git a/.github/workflows/rhel8-test.yml b/.github/workflows/rhel8-test.yml
index 1357e80..1fe6540 100644
--- a/.github/workflows/rhel8-test.yml
+++ b/.github/workflows/rhel8-test.yml
@@ -54,7 +54,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4.3.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           persist-credentials: false
           lfs: true
diff --git a/.github/workflows/smoke-test.yml b/.github/workflows/smoke-test.yml
index 1b42c8e..8d25821 100644
--- a/.github/workflows/smoke-test.yml
+++ b/.github/workflows/smoke-test.yml
@@ -62,7 +62,7 @@ jobs:
         run: echo "Skipping ${{ matrix.label }} as requested." && exit 0
 
       - name: Checkout (with all submodules)
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4.3.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           submodules: recursive