diff --git a/.github/workflows/gh-pages.yml b/.github/workflows/gh-pages.yml
index a23d6abc8..00188aba7 100644
--- a/.github/workflows/gh-pages.yml
+++ b/.github/workflows/gh-pages.yml
@@ -20,7 +20,7 @@ jobs:
     if: ${{ github.repository == 'ruby/irb' && !startsWith(github.event_name, 'pull') }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v6.0.2
       - name: Setup Ruby
         uses: ruby/setup-ruby@f26937343756480a8cb3ae1f623b9c8d89ed6984 # v1.196.0
         with:
diff --git a/.github/workflows/push_gem.yml b/.github/workflows/push_gem.yml
index ea01116b6..51a77c728 100644
--- a/.github/workflows/push_gem.yml
+++ b/.github/workflows/push_gem.yml
@@ -27,7 +27,7 @@ jobs:
         with:
           egress-policy: audit
 
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4.2.2
+      - uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # v4.2.2
 
       - name: Set up Ruby
         uses: ruby/setup-ruby@13e7a03dc3ac6c3798f4570bfead2aed4d96abfb # v1.244.0
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index fe6e0f401..8429ddde4 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -17,7 +17,7 @@ jobs:
     if: github.repository == 'ruby/irb' || github.event_name != 'schedule'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with:
@@ -38,7 +38,7 @@ jobs:
       WITH_LATEST_RELINE: ${{matrix.with_latest_reline}}
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
+      - uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with:
@@ -62,7 +62,7 @@ jobs:
       PRISM_VERSION: ${{matrix.prism_version}}
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
+      - uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with:
@@ -76,7 +76,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with:
@@ -109,7 +109,7 @@ jobs:
       WITH_VTERM: 1
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
+      - uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
       - name: Install libvterm
         run: |
           sudo apt install -y libtool-bin
diff --git a/.github/workflows/truffle-ruby-test.yml b/.github/workflows/truffle-ruby-test.yml
index a11bf3151..98288036b 100644
--- a/.github/workflows/truffle-ruby-test.yml
+++ b/.github/workflows/truffle-ruby-test.yml
@@ -19,7 +19,7 @@ jobs:
       WITH_LATEST_RELINE: ${{matrix.with_latest_reline}}
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
+      - uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with: