diff --git a/.github/workflows/android-armv7-cpu.yml b/.github/workflows/android-armv7-cpu.yml
index 0b90d2b4f8ba..ca456af52067 100644
--- a/.github/workflows/android-armv7-cpu.yml
+++ b/.github/workflows/android-armv7-cpu.yml
@@ -26,7 +26,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: build
       run: |
         mkdir build && cd build
diff --git a/.github/workflows/android-armv7-gpu.yml b/.github/workflows/android-armv7-gpu.yml
index f9b2541ca302..245bd0df560f 100644
--- a/.github/workflows/android-armv7-gpu.yml
+++ b/.github/workflows/android-armv7-gpu.yml
@@ -28,7 +28,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: build
diff --git a/.github/workflows/android-armv8-cpu.yml b/.github/workflows/android-armv8-cpu.yml
index 81f40a71acaf..5ba81930f8a0 100644
--- a/.github/workflows/android-armv8-cpu.yml
+++ b/.github/workflows/android-armv8-cpu.yml
@@ -26,7 +26,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: build
       run: |
         mkdir build && cd build
diff --git a/.github/workflows/android-armv8-gpu.yml b/.github/workflows/android-armv8-gpu.yml
index 7a8a90784f81..573bb206afe6 100644
--- a/.github/workflows/android-armv8-gpu.yml
+++ b/.github/workflows/android-armv8-gpu.yml
@@ -28,7 +28,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: build
@@ -59,7 +59,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: ndk-r16b
diff --git a/.github/workflows/android-x64-cpu.yml b/.github/workflows/android-x64-cpu.yml
index 5946e50defeb..6b07a1d50110 100644
--- a/.github/workflows/android-x64-cpu.yml
+++ b/.github/workflows/android-x64-cpu.yml
@@ -26,7 +26,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: build
       run: |
         mkdir build && cd build
diff --git a/.github/workflows/android-x64-gpu.yml b/.github/workflows/android-x64-gpu.yml
index 2cb5fb932c4b..a999199bc375 100644
--- a/.github/workflows/android-x64-gpu.yml
+++ b/.github/workflows/android-x64-gpu.yml
@@ -28,7 +28,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: build
diff --git a/.github/workflows/android-x86-cpu.yml b/.github/workflows/android-x86-cpu.yml
index 8e2b7461127d..03a6883efdad 100644
--- a/.github/workflows/android-x86-cpu.yml
+++ b/.github/workflows/android-x86-cpu.yml
@@ -26,7 +26,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: build
       run: |
         mkdir build && cd build
diff --git a/.github/workflows/android-x86-gpu.yml b/.github/workflows/android-x86-gpu.yml
index be0114b5f051..4e196a743d7b 100644
--- a/.github/workflows/android-x86-gpu.yml
+++ b/.github/workflows/android-x86-gpu.yml
@@ -28,7 +28,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: build
diff --git a/.github/workflows/code-format.yml b/.github/workflows/code-format.yml
index cea332c64765..3884ef11bcb2 100644
--- a/.github/workflows/code-format.yml
+++ b/.github/workflows/code-format.yml
@@ -6,7 +6,7 @@ jobs:
   code-format:
     runs-on: ubuntu-20.04
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
 
     - name: cache-clang-format
       id: cache-clang-format
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 01fd43de3088..8e6373283be1 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -36,7 +36,7 @@ jobs:
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
     - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         # We must fetch at least the immediate parents so that if this is
         # a pull request then we can checkout the head.
diff --git a/.github/workflows/elf-riscv32-cpu-gcc.yml b/.github/workflows/elf-riscv32-cpu-gcc.yml
index d8a92b34b987..f6798554a928 100644
--- a/.github/workflows/elf-riscv32-cpu-gcc.yml
+++ b/.github/workflows/elf-riscv32-cpu-gcc.yml
@@ -30,7 +30,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
 
     - name: cache-riscv
       id: cache-riscv
@@ -47,7 +47,7 @@ jobs:
 
     - name: checkout-riscv-gnu-toolchain
       if: steps.cache-riscv.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: riscv/riscv-gnu-toolchain
         path: riscv-gnu-toolchain
@@ -71,7 +71,7 @@ jobs:
 
     - name: checkout-riscv-pk
       if: steps.cache-riscv.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: riscv/riscv-pk
         path: riscv-pk
@@ -89,7 +89,7 @@ jobs:
 
     - name: checkout-riscv-isa-sim
       if: steps.cache-riscv.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: riscv/riscv-isa-sim
         path: riscv-isa-sim
diff --git a/.github/workflows/elf-riscv64-cpu-gcc.yml b/.github/workflows/elf-riscv64-cpu-gcc.yml
index f80d2502e63d..4724a29336c0 100644
--- a/.github/workflows/elf-riscv64-cpu-gcc.yml
+++ b/.github/workflows/elf-riscv64-cpu-gcc.yml
@@ -30,7 +30,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
 
     - name: cache-riscv
       id: cache-riscv
@@ -47,7 +47,7 @@ jobs:
 
     - name: checkout-riscv-gnu-toolchain
       if: steps.cache-riscv.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: riscv/riscv-gnu-toolchain
         path: riscv-gnu-toolchain
@@ -72,7 +72,7 @@ jobs:
 
     - name: checkout-riscv-pk
       if: steps.cache-riscv.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: riscv/riscv-pk
         path: riscv-pk
@@ -90,7 +90,7 @@ jobs:
 
     - name: checkout-riscv-isa-sim
       if: steps.cache-riscv.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: riscv/riscv-isa-sim
         path: riscv-isa-sim
diff --git a/.github/workflows/ios-arm64-gpu.yml b/.github/workflows/ios-arm64-gpu.yml
index fe77da57472c..593c36e6ec44 100644
--- a/.github/workflows/ios-arm64-gpu.yml
+++ b/.github/workflows/ios-arm64-gpu.yml
@@ -32,7 +32,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: cache-openmp
diff --git a/.github/workflows/ios-cpu.yml b/.github/workflows/ios-cpu.yml
index f0c666253812..603f2a9bb439 100644
--- a/.github/workflows/ios-cpu.yml
+++ b/.github/workflows/ios-cpu.yml
@@ -30,7 +30,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: cache-openmp
       id: cache-openmp
       uses: actions/cache@v2.1.6
diff --git a/.github/workflows/ios-simulator.yml b/.github/workflows/ios-simulator.yml
index dc7838c4c855..e0fcee44106a 100644
--- a/.github/workflows/ios-simulator.yml
+++ b/.github/workflows/ios-simulator.yml
@@ -30,7 +30,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: cache-openmp
       id: cache-openmp
       uses: actions/cache@v2.1.6
diff --git a/.github/workflows/linux-aarch64-cpu-gcc.yml b/.github/workflows/linux-aarch64-cpu-gcc.yml
index 5f030f652da0..9615ecb9b3a0 100644
--- a/.github/workflows/linux-aarch64-cpu-gcc.yml
+++ b/.github/workflows/linux-aarch64-cpu-gcc.yml
@@ -30,7 +30,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
 
     - name: cache-qemu
       id: cache-qemu
@@ -40,7 +40,7 @@ jobs:
         key: qemu-aarch64-install-1
     - name: checkout-qemu
       if: steps.cache-qemu.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: qemu/qemu
         path: qemu
@@ -88,7 +88,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
 
     - name: cache-qemu
       id: cache-qemu
@@ -98,7 +98,7 @@ jobs:
         key: qemu-aarch64-install-1
     - name: checkout-qemu
       if: steps.cache-qemu.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: qemu/qemu
         path: qemu
diff --git a/.github/workflows/linux-arm-cpu-gcc.yml b/.github/workflows/linux-arm-cpu-gcc.yml
index 831a5d2db47d..ce2d1a99fcec 100644
--- a/.github/workflows/linux-arm-cpu-gcc.yml
+++ b/.github/workflows/linux-arm-cpu-gcc.yml
@@ -32,7 +32,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
 
     - name: cache-qemu
       id: cache-qemu
@@ -42,7 +42,7 @@ jobs:
         key: qemu-arm-install-1
     - name: checkout-qemu
       if: steps.cache-qemu.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: qemu/qemu
         path: qemu
@@ -90,7 +90,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
 
     - name: cache-qemu
       id: cache-qemu
@@ -100,7 +100,7 @@ jobs:
         key: qemu-arm-install-1
     - name: checkout-qemu
       if: steps.cache-qemu.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: qemu/qemu
         path: qemu
diff --git a/.github/workflows/linux-mips-cpu-gcc.yml b/.github/workflows/linux-mips-cpu-gcc.yml
index a0e1098406d3..f55d78f0246b 100644
--- a/.github/workflows/linux-mips-cpu-gcc.yml
+++ b/.github/workflows/linux-mips-cpu-gcc.yml
@@ -32,7 +32,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
 
     - name: cache-qemu
       id: cache-qemu
@@ -42,7 +42,7 @@ jobs:
         key: qemu-mipsel-install-1
     - name: checkout-qemu
       if: steps.cache-qemu.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: qemu/qemu
         path: qemu
@@ -79,7 +79,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
 
     - name: cache-qemu
       id: cache-qemu
@@ -89,7 +89,7 @@ jobs:
         key: qemu-mipsel-install-1
     - name: checkout-qemu
       if: steps.cache-qemu.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: qemu/qemu
         path: qemu
diff --git a/.github/workflows/linux-mips64-cpu-gcc.yml b/.github/workflows/linux-mips64-cpu-gcc.yml
index db82235c13ba..eb36101fb29c 100644
--- a/.github/workflows/linux-mips64-cpu-gcc.yml
+++ b/.github/workflows/linux-mips64-cpu-gcc.yml
@@ -32,7 +32,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
 
     - name: cache-qemu
       id: cache-qemu
@@ -42,7 +42,7 @@ jobs:
         key: qemu-mips64el-install-1
     - name: checkout-qemu
       if: steps.cache-qemu.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: qemu/qemu
         path: qemu
@@ -79,7 +79,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
 
     - name: cache-qemu
       id: cache-qemu
@@ -89,7 +89,7 @@ jobs:
         key: qemu-mips64el-install-1
     - name: checkout-qemu
       if: steps.cache-qemu.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: qemu/qemu
         path: qemu
diff --git a/.github/workflows/linux-ppc64-cpu-gcc.yml b/.github/workflows/linux-ppc64-cpu-gcc.yml
index 7b1d828b13a2..ebce98f82040 100644
--- a/.github/workflows/linux-ppc64-cpu-gcc.yml
+++ b/.github/workflows/linux-ppc64-cpu-gcc.yml
@@ -28,7 +28,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
 
     - name: cache-qemu
       id: cache-qemu
@@ -38,7 +38,7 @@ jobs:
         key: qemu-ppc64le-install-1
     - name: checkout-qemu
       if: steps.cache-qemu.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: qemu/qemu
         path: qemu
diff --git a/.github/workflows/linux-riscv64-cpu-gcc.yml b/.github/workflows/linux-riscv64-cpu-gcc.yml
index 909abcd16ecf..dc6b257cfbbf 100644
--- a/.github/workflows/linux-riscv64-cpu-gcc.yml
+++ b/.github/workflows/linux-riscv64-cpu-gcc.yml
@@ -32,7 +32,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
 
     - name: cache-qemu
       id: cache-qemu
@@ -42,7 +42,7 @@ jobs:
         key: qemu-riscv64-install-1
     - name: checkout-qemu
       if: steps.cache-qemu.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: qemu/qemu
         path: qemu
@@ -79,7 +79,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
 
     - name: cache-qemu
       id: cache-qemu
@@ -96,7 +96,7 @@ jobs:
 
     - name: checkout-qemu
       if: steps.cache-qemu.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: sifive/qemu
         path: qemu
@@ -133,7 +133,7 @@ jobs:
 
     - name: checkout-riscv-gnu-toolchain
       if: steps.cache-riscv.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: riscv/riscv-gnu-toolchain
         path: riscv-gnu-toolchain
diff --git a/.github/workflows/linux-x64-cpu-clang-python.yml b/.github/workflows/linux-x64-cpu-clang-python.yml
index ffc37ecd4feb..7bd6d132fd26 100644
--- a/.github/workflows/linux-x64-cpu-clang-python.yml
+++ b/.github/workflows/linux-x64-cpu-clang-python.yml
@@ -32,7 +32,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: update
diff --git a/.github/workflows/linux-x64-cpu-clang.yml b/.github/workflows/linux-x64-cpu-clang.yml
index b8f5005f5384..32f924119f2b 100644
--- a/.github/workflows/linux-x64-cpu-clang.yml
+++ b/.github/workflows/linux-x64-cpu-clang.yml
@@ -34,7 +34,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: update
       run: sudo apt-get update
     - name: protobuf
@@ -105,7 +105,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: build-simplestl
       env:
         CC: clang
diff --git a/.github/workflows/linux-x64-cpu-gcc.yml b/.github/workflows/linux-x64-cpu-gcc.yml
index 26cc5e535924..84bbbfceb172 100644
--- a/.github/workflows/linux-x64-cpu-gcc.yml
+++ b/.github/workflows/linux-x64-cpu-gcc.yml
@@ -34,7 +34,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: update
       run: sudo apt-get update
     - name: protobuf
@@ -87,7 +87,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: build-nostdio
       run: |
         mkdir build-nostdio && cd build-nostdio
diff --git a/.github/workflows/linux-x64-gpu-clang-python.yml b/.github/workflows/linux-x64-gpu-clang-python.yml
index 56ceff2b9d57..05f1b395bd91 100644
--- a/.github/workflows/linux-x64-gpu-clang-python.yml
+++ b/.github/workflows/linux-x64-gpu-clang-python.yml
@@ -33,7 +33,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: update
@@ -61,7 +61,7 @@ jobs:
         key: swiftshader-linux-install-20200508
     - name: checkout-swiftshader
       if: steps.cache-swiftshader.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: google/swiftshader
         path: swiftshader
diff --git a/.github/workflows/linux-x64-gpu-clang.yml b/.github/workflows/linux-x64-gpu-clang.yml
index 9fb0cb05d8d2..1f9be4ee0025 100644
--- a/.github/workflows/linux-x64-gpu-clang.yml
+++ b/.github/workflows/linux-x64-gpu-clang.yml
@@ -34,7 +34,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: update
@@ -62,7 +62,7 @@ jobs:
         key: swiftshader-linux-install-20200508
     - name: checkout-swiftshader
       if: steps.cache-swiftshader.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: google/swiftshader
         path: swiftshader
diff --git a/.github/workflows/linux-x64-gpu-gcc.yml b/.github/workflows/linux-x64-gpu-gcc.yml
index 69fbcc660c18..2b97a92b66a5 100644
--- a/.github/workflows/linux-x64-gpu-gcc.yml
+++ b/.github/workflows/linux-x64-gpu-gcc.yml
@@ -34,7 +34,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: update
@@ -62,7 +62,7 @@ jobs:
         key: swiftshader-linux-install-20200508
     - name: checkout-swiftshader
       if: steps.cache-swiftshader.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: google/swiftshader
         path: swiftshader
diff --git a/.github/workflows/linux-x86-cpu-clang.yml b/.github/workflows/linux-x86-cpu-clang.yml
index 1be2db6f2f21..b1f17ee855b6 100644
--- a/.github/workflows/linux-x86-cpu-clang.yml
+++ b/.github/workflows/linux-x86-cpu-clang.yml
@@ -30,7 +30,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: update
       run: sudo apt-get update
     - name: gcc-multilib
diff --git a/.github/workflows/linux-x86-cpu-gcc.yml b/.github/workflows/linux-x86-cpu-gcc.yml
index c601f597e17a..e1315bff4bb0 100644
--- a/.github/workflows/linux-x86-cpu-gcc.yml
+++ b/.github/workflows/linux-x86-cpu-gcc.yml
@@ -30,7 +30,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: update
       run: sudo apt-get update
     - name: gcc-multilib
diff --git a/.github/workflows/macos-arm64-cpu.yml b/.github/workflows/macos-arm64-cpu.yml
index 2547f387940e..8883907fb354 100644
--- a/.github/workflows/macos-arm64-cpu.yml
+++ b/.github/workflows/macos-arm64-cpu.yml
@@ -28,7 +28,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: cache-openmp
       id: cache-openmp
       uses: actions/cache@v2.1.6
diff --git a/.github/workflows/macos-arm64-gpu.yml b/.github/workflows/macos-arm64-gpu.yml
index dc1853695619..5b0b9268e54d 100644
--- a/.github/workflows/macos-arm64-gpu.yml
+++ b/.github/workflows/macos-arm64-gpu.yml
@@ -30,7 +30,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: cache-openmp
diff --git a/.github/workflows/macos-x64-cpu-python.yml b/.github/workflows/macos-x64-cpu-python.yml
index 58bd55775cad..30fc80ecc360 100644
--- a/.github/workflows/macos-x64-cpu-python.yml
+++ b/.github/workflows/macos-x64-cpu-python.yml
@@ -33,7 +33,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: set up python ${{ matrix.python-version }}
diff --git a/.github/workflows/macos-x64-cpu.yml b/.github/workflows/macos-x64-cpu.yml
index bef59a9b7af6..ccdc26cd4140 100644
--- a/.github/workflows/macos-x64-cpu.yml
+++ b/.github/workflows/macos-x64-cpu.yml
@@ -34,7 +34,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: protobuf
       run: brew install protobuf opencv3
     - name: cache-openmp
diff --git a/.github/workflows/macos-x64-gpu.yml b/.github/workflows/macos-x64-gpu.yml
index 4008ddc7c188..4c1e849ccd7b 100644
--- a/.github/workflows/macos-x64-gpu.yml
+++ b/.github/workflows/macos-x64-gpu.yml
@@ -36,7 +36,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: protobuf
@@ -89,7 +89,7 @@ jobs:
         key: swiftshader-macos-install-20200508
     - name: checkout-swiftshader
       if: steps.cache-swiftshader.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: google/swiftshader
         path: swiftshader
diff --git a/.github/workflows/release-python.yml b/.github/workflows/release-python.yml
index 9bcb187c2bc8..1a06473380c7 100644
--- a/.github/workflows/release-python.yml
+++ b/.github/workflows/release-python.yml
@@ -9,7 +9,7 @@ jobs:
     name: Build SDist
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
 
@@ -38,7 +38,7 @@ jobs:
         os: [ubuntu-latest, windows-latest, macos-latest]
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index dc7ac5bde21a..234c0c2771b3 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -25,7 +25,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-full-source
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: package
@@ -45,7 +45,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-ubuntu-1604
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: apt
@@ -88,7 +88,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-ubuntu-1604-shared
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: apt
@@ -131,7 +131,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-ubuntu-1804
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: apt
@@ -174,7 +174,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-ubuntu-1804-shared
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: apt
@@ -217,7 +217,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-ubuntu-2004
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: apt
@@ -260,7 +260,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-ubuntu-2004-shared
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: apt
@@ -308,7 +308,7 @@ jobs:
         key: openmp-macos-release-11.0.0
     - name: checkout
       if: steps.cache-openmp.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
     - name: openmp
       if: steps.cache-openmp.outputs.cache-hit != 'true'
       run: |
@@ -355,7 +355,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-macos
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: download-openmp-macos
       uses: actions/download-artifact@v2
       with:
@@ -423,7 +423,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-macos-vulkan
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: download-openmp-macos
@@ -534,7 +534,7 @@ jobs:
         key: openmp-ios-release-11.0.0
     - name: checkout
       if: steps.cache-openmp.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
     - name: openmp
       if: steps.cache-openmp.outputs.cache-hit != 'true'
       run: |
@@ -585,7 +585,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-ios
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: download-openmp-ios
       uses: actions/download-artifact@v2
       with:
@@ -657,7 +657,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-ios-vulkan
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: download-openmp-ios
@@ -768,7 +768,7 @@ jobs:
         key: openmp-ios-bitcode-release-11.0.0
     - name: checkout
       if: steps.cache-openmp.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
     - name: openmp
       if: steps.cache-openmp.outputs.cache-hit != 'true'
       run: |
@@ -819,7 +819,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-ios-bitcode
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: download-openmp-ios-bitcode
       uses: actions/download-artifact@v2
       with:
@@ -891,7 +891,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-ios-vulkan-bitcode
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: download-openmp-ios-bitcode
@@ -997,7 +997,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-android
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: ndk-fix-debug
       run: sed -i -e '/^  -g$/d' $ANDROID_HOME/ndk-bundle/build/cmake/android.toolchain.cmake
     - name: build-armv7
@@ -1058,7 +1058,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-android-shared
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: ndk-fix-debug
       run: sed -i -e '/^  -g$/d' $ANDROID_HOME/ndk-bundle/build/cmake/android.toolchain.cmake
     - name: build-armv7
@@ -1119,7 +1119,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-android-vulkan
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: cache-vulkansdk
@@ -1199,7 +1199,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-android-vulkan-shared
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: cache-vulkansdk
@@ -1279,7 +1279,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-webassembly
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: emsdk
       run: |
         git clone https://github.com/emscripten-core/emsdk.git
@@ -1344,7 +1344,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-windows-vs2015
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: cache-protobuf
@@ -1434,7 +1434,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-windows-vs2015-shared
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: cache-protobuf
@@ -1522,7 +1522,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-windows-vs2017
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: cache-protobuf
@@ -1612,7 +1612,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-windows-vs2017-shared
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: cache-protobuf
@@ -1700,7 +1700,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-windows-vs2019
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: cache-protobuf
@@ -1790,7 +1790,7 @@ jobs:
     env:
       PACKAGENAME: ncnn-${{ needs.setup.outputs.VERSION }}-windows-vs2019-shared
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: cache-protobuf
diff --git a/.github/workflows/sync-wiki.yml b/.github/workflows/sync-wiki.yml
index d1fe7627d2aa..574e2dfbadf0 100644
--- a/.github/workflows/sync-wiki.yml
+++ b/.github/workflows/sync-wiki.yml
@@ -10,7 +10,7 @@ jobs:
   sync-wiki:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: sync
       run: |
         cp -r docs $GITHUB_WORKSPACE/ncnn.wiki
diff --git a/.github/workflows/test-coverage.yml b/.github/workflows/test-coverage.yml
index d6742d55ba17..31f25ab67771 100644
--- a/.github/workflows/test-coverage.yml
+++ b/.github/workflows/test-coverage.yml
@@ -26,7 +26,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: lcov
@@ -52,7 +52,7 @@ jobs:
         key: swiftshader-linux-install-20200508
     - name: checkout-swiftshader
       if: steps.cache-swiftshader.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: google/swiftshader
         path: swiftshader
@@ -99,7 +99,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: lcov
       run: sudo apt-get install lcov
     - name: configure
@@ -128,7 +128,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: lcov
       run: sudo apt-get install lcov
     - name: configure
@@ -157,7 +157,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: lcov
       run: sudo apt-get install lcov
     - name: configure
@@ -186,7 +186,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: lcov
       run: sudo apt-get install lcov
 
@@ -198,7 +198,7 @@ jobs:
         key: qemu-arm-install-1
     - name: checkout-qemu
       if: steps.cache-qemu.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: qemu/qemu
         path: qemu
@@ -248,7 +248,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: lcov
       run: sudo apt-get install lcov
 
@@ -260,7 +260,7 @@ jobs:
         key: qemu-aarch64-install-1
     - name: checkout-qemu
       if: steps.cache-qemu.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: qemu/qemu
         path: qemu
@@ -310,7 +310,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
 
     - name: lcov
       run: sudo apt-get install lcov
@@ -322,7 +322,7 @@ jobs:
         key: qemu-aarch64-install-1
     - name: checkout-qemu
       if: steps.cache-qemu.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: qemu/qemu
         path: qemu
@@ -372,7 +372,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
 
     - name: lcov
       run: sudo apt-get install lcov
@@ -384,7 +384,7 @@ jobs:
         key: qemu-aarch64-install-1
     - name: checkout-qemu
       if: steps.cache-qemu.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: qemu/qemu
         path: qemu
@@ -434,7 +434,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
 
     - name: lcov
       run: sudo apt-get install lcov
@@ -446,7 +446,7 @@ jobs:
         key: qemu-mipsel-install-1
     - name: checkout-qemu
       if: steps.cache-qemu.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: qemu/qemu
         path: qemu
@@ -496,7 +496,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
 
     - name: lcov
       run: sudo apt-get install lcov
@@ -508,7 +508,7 @@ jobs:
         key: qemu-mips64el-install-1
     - name: checkout-qemu
       if: steps.cache-qemu.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: qemu/qemu
         path: qemu
@@ -558,7 +558,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
 
     - name: lcov
       run: sudo apt-get install lcov
@@ -571,7 +571,7 @@ jobs:
         key: qemu-riscv64-install-1
     - name: checkout-qemu
       if: steps.cache-qemu.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: qemu/qemu
         path: qemu
@@ -621,7 +621,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
 
     - name: lcov
       run: sudo apt-get install lcov
@@ -641,7 +641,7 @@ jobs:
 
     - name: checkout-qemu
       if: steps.cache-qemu.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: sifive/qemu
         path: qemu
@@ -678,7 +678,7 @@ jobs:
 
     - name: checkout-riscv-gnu-toolchain
       if: steps.cache-riscv.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: riscv/riscv-gnu-toolchain
         path: riscv-gnu-toolchain
diff --git a/.github/workflows/web-assembly.yml b/.github/workflows/web-assembly.yml
index fccb81ecea48..490bd088e465 100644
--- a/.github/workflows/web-assembly.yml
+++ b/.github/workflows/web-assembly.yml
@@ -28,7 +28,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: emsdk
       run: |
         git clone https://github.com/emscripten-core/emsdk.git
diff --git a/.github/workflows/windows-x64-cpu-vs2015.yml b/.github/workflows/windows-x64-cpu-vs2015.yml
index a310ccf72ace..4d2ee34a1a2e 100644
--- a/.github/workflows/windows-x64-cpu-vs2015.yml
+++ b/.github/workflows/windows-x64-cpu-vs2015.yml
@@ -32,7 +32,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: cache-protobuf
       id: cache-protobuf
       uses: actions/cache@v2.1.6
diff --git a/.github/workflows/windows-x64-cpu-vs2017.yml b/.github/workflows/windows-x64-cpu-vs2017.yml
index b640a483e552..359fa04b261c 100644
--- a/.github/workflows/windows-x64-cpu-vs2017.yml
+++ b/.github/workflows/windows-x64-cpu-vs2017.yml
@@ -32,7 +32,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: cache-protobuf
       id: cache-protobuf
       uses: actions/cache@v2.1.6
diff --git a/.github/workflows/windows-x64-cpu-vs2019-python.yml b/.github/workflows/windows-x64-cpu-vs2019-python.yml
index 9cd13140102e..2d2840b7bdf1 100644
--- a/.github/workflows/windows-x64-cpu-vs2019-python.yml
+++ b/.github/workflows/windows-x64-cpu-vs2019-python.yml
@@ -31,7 +31,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: set up python ${{ matrix.python-version }}
diff --git a/.github/workflows/windows-x64-cpu-vs2019.yml b/.github/workflows/windows-x64-cpu-vs2019.yml
index 02d4c9e0fd88..fe57b2b44ff8 100644
--- a/.github/workflows/windows-x64-cpu-vs2019.yml
+++ b/.github/workflows/windows-x64-cpu-vs2019.yml
@@ -32,7 +32,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: cache-protobuf
       id: cache-protobuf
       uses: actions/cache@v2.1.6
diff --git a/.github/workflows/windows-x64-gpu-vs2017.yml b/.github/workflows/windows-x64-gpu-vs2017.yml
index 6a5314401cae..0e314c5aff56 100644
--- a/.github/workflows/windows-x64-gpu-vs2017.yml
+++ b/.github/workflows/windows-x64-gpu-vs2017.yml
@@ -34,7 +34,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: cache-protobuf
@@ -72,7 +72,7 @@ jobs:
         key: swiftshader-vs2017-x64-install3-20200508
     - name: checkout-swiftshader
       if: steps.cache-swiftshader.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: google/swiftshader
         path: swiftshader
diff --git a/.github/workflows/windows-x64-gpu-vs2019.yml b/.github/workflows/windows-x64-gpu-vs2019.yml
index 9b9fadb5a96f..142654920c1c 100644
--- a/.github/workflows/windows-x64-gpu-vs2019.yml
+++ b/.github/workflows/windows-x64-gpu-vs2019.yml
@@ -34,7 +34,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
       with:
         submodules: true
     - name: cache-protobuf
@@ -72,7 +72,7 @@ jobs:
         key: swiftshader-windows-install-20200508
     - name: checkout-swiftshader
       if: steps.cache-swiftshader.outputs.cache-hit != 'true'
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.0.2
       with:
         repository: google/swiftshader
         path: swiftshader
diff --git a/.github/workflows/windows-x86-cpu-vs2015.yml b/.github/workflows/windows-x86-cpu-vs2015.yml
index df779a8874b1..a75e75b3cb47 100644
--- a/.github/workflows/windows-x86-cpu-vs2015.yml
+++ b/.github/workflows/windows-x86-cpu-vs2015.yml
@@ -28,7 +28,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: build
       run: |
         mkdir build; cd build
diff --git a/.github/workflows/windows-x86-cpu-vs2017.yml b/.github/workflows/windows-x86-cpu-vs2017.yml
index 56e4a4cc0dfe..b3c209acb34d 100644
--- a/.github/workflows/windows-x86-cpu-vs2017.yml
+++ b/.github/workflows/windows-x86-cpu-vs2017.yml
@@ -28,7 +28,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: build
       run: |
         mkdir build; cd build
diff --git a/.github/workflows/windows-x86-cpu-vs2019.yml b/.github/workflows/windows-x86-cpu-vs2019.yml
index f498724eb0a7..71cef9717cf2 100644
--- a/.github/workflows/windows-x86-cpu-vs2019.yml
+++ b/.github/workflows/windows-x86-cpu-vs2019.yml
@@ -28,7 +28,7 @@ jobs:
       uses: styfle/cancel-workflow-action@0.9.1
       with:
         access_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.0.2
     - name: build
       run: |
         mkdir build; cd build