diff --git a/.github/workflows/examples-java.yml b/.github/workflows/examples-java.yml
index 038b7c0..a54d238 100644
--- a/.github/workflows/examples-java.yml
+++ b/.github/workflows/examples-java.yml
@@ -16,7 +16,7 @@ jobs:
   java:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:
           distribution: temurin
diff --git a/.github/workflows/examples-node.yml b/.github/workflows/examples-node.yml
index c5cd037..02e6f48 100644
--- a/.github/workflows/examples-node.yml
+++ b/.github/workflows/examples-node.yml
@@ -30,7 +30,7 @@ jobs:
       run:
         working-directory: ${{ matrix.project }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
         with:
           bun-version: "1.3.10"
diff --git a/.github/workflows/examples-python.yml b/.github/workflows/examples-python.yml
index d021c00..577d543 100644
--- a/.github/workflows/examples-python.yml
+++ b/.github/workflows/examples-python.yml
@@ -16,7 +16,7 @@ jobs:
   python:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
           python-version: "3.12"
diff --git a/.github/workflows/examples-rust.yml b/.github/workflows/examples-rust.yml
index 1bc76aa..ae81325 100644
--- a/.github/workflows/examples-rust.yml
+++ b/.github/workflows/examples-rust.yml
@@ -16,7 +16,7 @@ jobs:
   rust:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable @ 2026-05
         with:
           toolchain: stable
diff --git a/.github/workflows/no-leak.yml b/.github/workflows/no-leak.yml
index 16f2589..99f0aa0 100644
--- a/.github/workflows/no-leak.yml
+++ b/.github/workflows/no-leak.yml
@@ -19,7 +19,7 @@ jobs:
     env:
       DENYLIST: ${{ secrets.NEUTRALITY_DENYLIST }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - name: Forbidden-name scan
         run: |
           set -e