diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 3d03a30..9f16827 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -63,7 +63,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           # We don't push back to git in this workflow; don't persist
           # the GITHUB_TOKEN in the repo's git config.
diff --git a/.github/workflows/chart.yml b/.github/workflows/chart.yml
index fec00c4..f1ddd32 100644
--- a/.github/workflows/chart.yml
+++ b/.github/workflows/chart.yml
@@ -63,7 +63,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           fetch-depth: 1
           # Land on the actual branch so we can push the helm-docs auto-commit.
@@ -170,7 +170,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           fetch-depth: 1
           # Release job doesn't push to git; don't persist GITHUB_TOKEN.