diff --git a/.github/workflows/freeze-for-pr.yml b/.github/workflows/freeze-for-pr.yml
index 5dbadb857..094adf116 100644
--- a/.github/workflows/freeze-for-pr.yml
+++ b/.github/workflows/freeze-for-pr.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
         with:
           submodules: "true"
 
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index b9c96ed9a..f967c5655 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
         with:
           submodules: "true"
 
diff --git a/.github/workflows/pr-docs.yml b/.github/workflows/pr-docs.yml
index 771814bef..3115a95d3 100644
--- a/.github/workflows/pr-docs.yml
+++ b/.github/workflows/pr-docs.yml
@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Fetch merge branch
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 3af6ee761..0dfb1d4d2 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -18,7 +18,7 @@ jobs:
       id-token: write
 
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
         with:
           submodules: "true"
 
diff --git a/.github/workflows/py-test.yml b/.github/workflows/py-test.yml
index 1961bdd2b..64d267a9f 100644
--- a/.github/workflows/py-test.yml
+++ b/.github/workflows/py-test.yml
@@ -26,7 +26,7 @@ jobs:
     runs-on: ${{ matrix.os }}
 
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
         with:
           submodules: "true"
 
@@ -51,7 +51,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
         with:
           submodules: "true"
 
diff --git a/.github/workflows/reformat.yml b/.github/workflows/reformat.yml
index cfa81353e..92a3d0c6c 100644
--- a/.github/workflows/reformat.yml
+++ b/.github/workflows/reformat.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
         with:
           submodules: "true"
 
diff --git a/.github/workflows/release-docs.yml b/.github/workflows/release-docs.yml
index ccdf31e10..ea0fa9016 100644
--- a/.github/workflows/release-docs.yml
+++ b/.github/workflows/release-docs.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
         with:
           submodules: "true"
 
diff --git a/.github/workflows/resync-piped.yml b/.github/workflows/resync-piped.yml
index 9b5778aff..8dd5719b9 100644
--- a/.github/workflows/resync-piped.yml
+++ b/.github/workflows/resync-piped.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
         with:
           submodules: "true"
 
diff --git a/.github/workflows/type-check.yml b/.github/workflows/type-check.yml
index 6aa9928c8..bdf9ec3bc 100644
--- a/.github/workflows/type-check.yml
+++ b/.github/workflows/type-check.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
         with:
           submodules: "true"
 
diff --git a/.github/workflows/update-licence.yml b/.github/workflows/update-licence.yml
index ac8fa5d59..18e137575 100644
--- a/.github/workflows/update-licence.yml
+++ b/.github/workflows/update-licence.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
         with:
           submodules: "true"
 
diff --git a/.github/workflows/upgrade-locks.yml b/.github/workflows/upgrade-locks.yml
index 55615cd70..019904c0f 100644
--- a/.github/workflows/upgrade-locks.yml
+++ b/.github/workflows/upgrade-locks.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
         with:
           submodules: "true"
 
diff --git a/.github/workflows/verify-locks.yml b/.github/workflows/verify-locks.yml
index f0fe60df0..835a069ef 100644
--- a/.github/workflows/verify-locks.yml
+++ b/.github/workflows/verify-locks.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
         with:
           submodules: "true"
 
diff --git a/.github/workflows/verify-types.yml b/.github/workflows/verify-types.yml
index 3f5dbc832..71c7be7de 100644
--- a/.github/workflows/verify-types.yml
+++ b/.github/workflows/verify-types.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
         with:
           submodules: "true"