diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ec04abc161f..b5dfa47ed06 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
         with:
           fetch-tags: true
           fetch-depth: 0
diff --git a/.github/workflows/changelogs.yml b/.github/workflows/changelogs.yml
index ec5a20f36c6..939fdb79152 100644
--- a/.github/workflows/changelogs.yml
+++ b/.github/workflows/changelogs.yml
@@ -19,7 +19,7 @@ jobs:
     name: Test changelog entries
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
       with:
         fetch-depth: 1
     - id: master
diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
index 67dc934e7dc..113517bff0f 100644
--- a/.github/workflows/checks.yml
+++ b/.github/workflows/checks.yml
@@ -17,7 +17,7 @@ jobs:
     name: localizable
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
       - name: Check localizable strings
         shell: bash -x {0}
         run: ./check_localizable
@@ -29,7 +29,7 @@ jobs:
   copyrights:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
         with:
           fetch-depth: 0
       - name: Check copyright years
diff --git a/.github/workflows/git-checks.yml b/.github/workflows/git-checks.yml
index 6a0d0046466..746981c5b1c 100644
--- a/.github/workflows/git-checks.yml
+++ b/.github/workflows/git-checks.yml
@@ -12,6 +12,6 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@722adc63f1aa60a57ec37892e133b1d319cae598 #v2.0.0
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
     - name: Block Fixup Commit Merge
       uses: 13rac1/block-fixup-merge-action@bd5504fb9ca0253e109d98eb86b7debc01970cdc #v2.0.0
diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml
index d8a2cf5b82e..ceaeeab26c8 100644
--- a/.github/workflows/golangci-lint.yml
+++ b/.github/workflows/golangci-lint.yml
@@ -19,7 +19,7 @@ jobs:
     name: lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
       - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 #v5.5.0
         with:
           go-version: '1.25'
diff --git a/.github/workflows/mingo_build.yml b/.github/workflows/mingo_build.yml
index 1ec3f609acd..83440f93329 100644
--- a/.github/workflows/mingo_build.yml
+++ b/.github/workflows/mingo_build.yml
@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
         with:
           fetch-tags: true
           fetch-depth: 0
diff --git a/.github/workflows/prebuilt_devcontainer.yml b/.github/workflows/prebuilt_devcontainer.yml
index 87fdac0f8eb..589e021c05c 100644
--- a/.github/workflows/prebuilt_devcontainer.yml
+++ b/.github/workflows/prebuilt_devcontainer.yml
@@ -18,7 +18,7 @@ jobs:
     steps:
       - name: Checkout
         id: checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
 
       - name: Compute tag for devcontainer image
         id: meta
diff --git a/.github/workflows/reuse.yml b/.github/workflows/reuse.yml
index 5618261f69f..0ccd184a516 100644
--- a/.github/workflows/reuse.yml
+++ b/.github/workflows/reuse.yml
@@ -18,6 +18,6 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
     - name: REUSE Compliance Check
       uses: fsfe/reuse-action@bb774aa972c2a89ff34781233d275075cbddf542 #v5.0.0
diff --git a/.github/workflows/vulncheck.yml b/.github/workflows/vulncheck.yml
index a212e532246..607eac682de 100644
--- a/.github/workflows/vulncheck.yml
+++ b/.github/workflows/vulncheck.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
         with:
           fetch-tags: true
           fetch-depth: 0