diff --git a/.github/actions/hardened-libc++/action.yaml b/.github/actions/hardened-libc++/action.yaml
index e3a3b02..191bd4b 100644
--- a/.github/actions/hardened-libc++/action.yaml
+++ b/.github/actions/hardened-libc++/action.yaml
@@ -34,7 +34,7 @@ runs:
     - id: checkout-llvm
       name: Checkout LLVM project
       if: steps.cache-restore.outputs.cache-hit != 'true'
-      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       with:
         repository: llvm/llvm-project
         ref: llvmorg-${{ steps.init.outputs.llvmVersion }}
diff --git a/.github/workflows/cache-cleanup-after-closed-pr.yaml b/.github/workflows/cache-cleanup-after-closed-pr.yaml
index ca8e60c..afba5d7 100644
--- a/.github/workflows/cache-cleanup-after-closed-pr.yaml
+++ b/.github/workflows/cache-cleanup-after-closed-pr.yaml
@@ -45,7 +45,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Restore mise tools
         uses: ./.github/actions/mise-project-setup
diff --git a/.github/workflows/cpp-build-test-run.yaml b/.github/workflows/cpp-build-test-run.yaml
index a70240b..dacb2c8 100644
--- a/.github/workflows/cpp-build-test-run.yaml
+++ b/.github/workflows/cpp-build-test-run.yaml
@@ -78,7 +78,7 @@ jobs:
         shell: bash
 
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           submodules: true
 
diff --git a/.github/workflows/homebrew-prepare-cache.yaml b/.github/workflows/homebrew-prepare-cache.yaml
index 6f61cf2..450f9dd 100644
--- a/.github/workflows/homebrew-prepare-cache.yaml
+++ b/.github/workflows/homebrew-prepare-cache.yaml
@@ -30,7 +30,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - id: prepare-cache
         name: Prepare cache
diff --git a/.github/workflows/mise-prepare-cache.yaml b/.github/workflows/mise-prepare-cache.yaml
index d2499bc..16b2724 100644
--- a/.github/workflows/mise-prepare-cache.yaml
+++ b/.github/workflows/mise-prepare-cache.yaml
@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Prepare cache
         uses: ./.github/actions/mise-project-setup
diff --git a/.github/workflows/mise-task.yaml b/.github/workflows/mise-task.yaml
index 25845b9..71dd0d5 100644
--- a/.github/workflows/mise-task.yaml
+++ b/.github/workflows/mise-task.yaml
@@ -47,7 +47,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Restore tools
         uses: ./.github/actions/mise-project-setup
diff --git a/.github/workflows/mise-uv-prepare-cache.yaml b/.github/workflows/mise-uv-prepare-cache.yaml
index 5876a7d..06f022e 100644
--- a/.github/workflows/mise-uv-prepare-cache.yaml
+++ b/.github/workflows/mise-uv-prepare-cache.yaml
@@ -35,7 +35,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Restore mise project
         uses: ./.github/actions/mise-project-setup
diff --git a/.github/workflows/mise-uv-task.yaml b/.github/workflows/mise-uv-task.yaml
index 627a801..4677287 100644
--- a/.github/workflows/mise-uv-task.yaml
+++ b/.github/workflows/mise-uv-task.yaml
@@ -34,7 +34,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Restore mise project
         uses: ./.github/actions/mise-project-setup
diff --git a/.github/workflows/python-run.yaml b/.github/workflows/python-run.yaml
index edcf42a..a544c5b 100644
--- a/.github/workflows/python-run.yaml
+++ b/.github/workflows/python-run.yaml
@@ -13,7 +13,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Restore mise project
         uses: ./.github/actions/mise-project-setup
diff --git a/.github/workflows/rust-build-test-run.yaml b/.github/workflows/rust-build-test-run.yaml
index 0c9de44..3004351 100644
--- a/.github/workflows/rust-build-test-run.yaml
+++ b/.github/workflows/rust-build-test-run.yaml
@@ -41,7 +41,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Setup tools through mise
         uses: ./.github/actions/mise-project-setup