diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 16acd92..ce56b3a 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Pin Bazel to .bazelversion
         run: echo "USE_BAZEL_VERSION=$(cat .bazelversion)" >> "$GITHUB_ENV"
       - name: Setup Go
@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Pin Bazel to .bazelversion
         run: echo "USE_BAZEL_VERSION=$(cat .bazelversion)" >> "$GITHUB_ENV"
       - name: Cache bazel
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index acd23ea..0601491 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Create tag
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index 78d481c..b985c4b 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -26,7 +26,7 @@ jobs:
             ~/.cache/bazelisk
             ~/.cache/bazel
           key: ${{ runner.os }}-bazel-${{ matrix.bazel }}-cache
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: bazel test
         run: make test
   macos:
@@ -48,7 +48,7 @@ jobs:
             /private/var/tmp/_bazel_runner
             ~/Library/Caches/bazel
           key: ${{ runner.os }}-bazel-${{ matrix.bazel }}-cache
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: bazel test
         run: make test
   # Disabled due to error in protobuf on Windows