diff --git a/.github/workflows/build-packages.yaml b/.github/workflows/build-packages.yaml
index 2956125..84769b7 100644
--- a/.github/workflows/build-packages.yaml
+++ b/.github/workflows/build-packages.yaml
@@ -34,7 +34,7 @@ jobs:
       packages: ${{ steps.find.outputs.packages }}
       has_packages: ${{ steps.find.outputs.has_packages }}
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
         with:
           fetch-depth: 0
 
@@ -58,7 +58,7 @@ jobs:
       matrix:
         package: ${{ fromJSON(needs.detect.outputs.packages) }}
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
 
       - uses: ./.github/actions/setup-nix
         with:
diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 6a0de74..dc58fac 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -33,7 +33,7 @@ jobs:
       matrix:
         language: [python, actions]
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
 
       - uses: github/codeql-action/init@v4
         with:
diff --git a/.github/workflows/flake-check.yaml b/.github/workflows/flake-check.yaml
index 9beaff7..c3b0d65 100644
--- a/.github/workflows/flake-check.yaml
+++ b/.github/workflows/flake-check.yaml
@@ -23,7 +23,7 @@ jobs:
     name: nix flake check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
 
       - uses: ./.github/actions/setup-nix
         with:
diff --git a/.github/workflows/python-checks.yaml b/.github/workflows/python-checks.yaml
index 2f58b6d..564884d 100644
--- a/.github/workflows/python-checks.yaml
+++ b/.github/workflows/python-checks.yaml
@@ -25,7 +25,7 @@ jobs:
     name: ty + ruff
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
 
       - uses: astral-sh/setup-uv@v8.1.0
         with:
diff --git a/.github/workflows/update-pkgs.yaml b/.github/workflows/update-pkgs.yaml
index 26a16b4..93c1d0b 100644
--- a/.github/workflows/update-pkgs.yaml
+++ b/.github/workflows/update-pkgs.yaml
@@ -18,7 +18,7 @@ jobs:
     runs-on: macos-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v6.0.3
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
 
diff --git a/.github/workflows/yaml-check.yaml b/.github/workflows/yaml-check.yaml
index 2015c32..87321fb 100644
--- a/.github/workflows/yaml-check.yaml
+++ b/.github/workflows/yaml-check.yaml
@@ -23,7 +23,7 @@ jobs:
     name: yamlfmt
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
 
       - uses: actions/setup-go@v6.4.0
         with:
@@ -46,7 +46,7 @@ jobs:
       contents: read
       security-events: write
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
 
       - uses: astral-sh/setup-uv@v8.1.0