diff --git a/.github/workflows/bundle-size-autoheal.yml b/.github/workflows/bundle-size-autoheal.yml
index 340c21e1..fdb2740c 100644
--- a/.github/workflows/bundle-size-autoheal.yml
+++ b/.github/workflows/bundle-size-autoheal.yml
@@ -40,7 +40,7 @@ jobs:
     env:
       HEAD_BRANCH: ${{ github.event.workflow_run.head_branch }}
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
         with:
           token: ${{ secrets.AUTO_MERGE_PAT }}
           ref: ${{ github.event.workflow_run.head_branch }}
diff --git a/.github/workflows/ci-postgres.yml b/.github/workflows/ci-postgres.yml
index 3c8c3e39..296c1a0b 100644
--- a/.github/workflows/ci-postgres.yml
+++ b/.github/workflows/ci-postgres.yml
@@ -42,7 +42,7 @@ jobs:
       WARREN_TEST_DIALECT: postgres
       WARREN_TEST_PG_URL: postgres://warren:warren@127.0.0.1:5432/warren_test
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
 
       - uses: oven-sh/setup-bun@v2
         with:
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1c8b4442..17ae60e3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -10,7 +10,7 @@ jobs:
   ci:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
 
       - uses: oven-sh/setup-bun@v2
         with:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2473ea48..7defdbb8 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -17,7 +17,7 @@ jobs:
       release: ${{ steps.version-check.outputs.release }}
       version: ${{ steps.version-check.outputs.version }}
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
         with:
           fetch-depth: 0
 
@@ -113,7 +113,7 @@ jobs:
       group: fly-deploy-warren-deployed
       cancel-in-progress: false
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
 
       - uses: superfly/flyctl-actions/setup-flyctl@master
 
diff --git a/.github/workflows/sync-labels.yml b/.github/workflows/sync-labels.yml
index 0987bdec..76445268 100644
--- a/.github/workflows/sync-labels.yml
+++ b/.github/workflows/sync-labels.yml
@@ -34,7 +34,7 @@ jobs:
   sync:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
 
       # Pull-request runs are always dry-run: we want to see the diff in
       # the workflow logs before merging, but we never mutate the repo's