diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 72b5ba7..c0b5b9c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -28,7 +28,7 @@ jobs:
           go-version: ${{ matrix.go-version }}
 
       - name: Check out code into the Go module directory
-        uses: actions/checkout@v4.1.7
+        uses: actions/checkout@v4.2.1
 
       - name: Print Go environment
         id: vars
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 034756c..1ef547a 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -21,7 +21,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4.1.7
+        uses: actions/checkout@v4.2.1
         with:
           # We must fetch at least the immediate parents so that if this is
           # a pull request then we can checkout the head.
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index a9759be..f8ec5af 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -10,7 +10,7 @@ jobs:
     name: Golangci-Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.1
       - name: Run golangci-lint
         uses: golangci/golangci-lint-action@v6
         with:
diff --git a/.github/workflows/pr_review_dog.yml b/.github/workflows/pr_review_dog.yml
index 5d4cba1..eae023b 100644
--- a/.github/workflows/pr_review_dog.yml
+++ b/.github/workflows/pr_review_dog.yml
@@ -17,7 +17,7 @@ jobs:
           go-version: "1.20.x"
 
       - name: Check out code into the Go module directory
-        uses: actions/checkout@v4.1.7
+        uses: actions/checkout@v4.2.1
 
       - name: golangci-lint
         uses: reviewdog/action-golangci-lint@v2