diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index 7edcc1b..fc09e2e 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -35,7 +35,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
 
       # Install the cosign tool except on PR
       # https://github.com/sigstore/cosign-installer
diff --git a/.github/workflows/freeze-for-pr.yml b/.github/workflows/freeze-for-pr.yml
index 8b21d86..ada7ddf 100644
--- a/.github/workflows/freeze-for-pr.yml
+++ b/.github/workflows/freeze-for-pr.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           submodules: "true"
 
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index b26f45c..e55f538 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           submodules: "true"
 
diff --git a/.github/workflows/reformat.yml b/.github/workflows/reformat.yml
index f0494a6..211b7fd 100644
--- a/.github/workflows/reformat.yml
+++ b/.github/workflows/reformat.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           submodules: "true"
 
diff --git a/.github/workflows/resync-piped.yml b/.github/workflows/resync-piped.yml
index 27dcfaa..c31d820 100644
--- a/.github/workflows/resync-piped.yml
+++ b/.github/workflows/resync-piped.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           submodules: "true"
 
diff --git a/.github/workflows/type-check.yml b/.github/workflows/type-check.yml
index 35e6965..a275e4a 100644
--- a/.github/workflows/type-check.yml
+++ b/.github/workflows/type-check.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           submodules: "true"
 
diff --git a/.github/workflows/update-licence.yml b/.github/workflows/update-licence.yml
index e16e82d..4e6a430 100644
--- a/.github/workflows/update-licence.yml
+++ b/.github/workflows/update-licence.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           submodules: "true"
 
diff --git a/.github/workflows/upgrade-locks.yml b/.github/workflows/upgrade-locks.yml
index 68e1d1a..430c197 100644
--- a/.github/workflows/upgrade-locks.yml
+++ b/.github/workflows/upgrade-locks.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           submodules: "true"
 
diff --git a/.github/workflows/verify-locks.yml b/.github/workflows/verify-locks.yml
index 149384f..8c98f67 100644
--- a/.github/workflows/verify-locks.yml
+++ b/.github/workflows/verify-locks.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           submodules: "true"
 
diff --git a/github/actions/clippy.yml b/github/actions/clippy.yml
index d1c9e5b..ca5c105 100644
--- a/github/actions/clippy.yml
+++ b/github/actions/clippy.yml
@@ -17,7 +17,7 @@ jobs:
   clippy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
 
       - uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af
         with:
diff --git a/github/actions/docker-publish.yml b/github/actions/docker-publish.yml
index b915edb..06c0425 100644
--- a/github/actions/docker-publish.yml
+++ b/github/actions/docker-publish.yml
@@ -35,7 +35,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
 
       # Install the cosign tool except on PR
       # https://github.com/sigstore/cosign-installer
diff --git a/github/actions/freeze-for-pr.yml b/github/actions/freeze-for-pr.yml
index fff9180..31c718a 100644
--- a/github/actions/freeze-for-pr.yml
+++ b/github/actions/freeze-for-pr.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           submodules: "true"
 
diff --git a/github/actions/lint.yml b/github/actions/lint.yml
index 01f1562..c88bd49 100644
--- a/github/actions/lint.yml
+++ b/github/actions/lint.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           submodules: "true"
 
diff --git a/github/actions/pr-docs.yml b/github/actions/pr-docs.yml
index c532cb9..6d4e259 100644
--- a/github/actions/pr-docs.yml
+++ b/github/actions/pr-docs.yml
@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Fetch merge branch
-        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           {% raw %}ref: ${{ github.event.pull_request.head.sha }}{% endraw %}
           {% raw %}repository: ${{ github.event.pull_request.head.repo.full_name }}{% endraw %}
diff --git a/github/actions/publish.yml b/github/actions/publish.yml
index 6440991..2759830 100644
--- a/github/actions/publish.yml
+++ b/github/actions/publish.yml
@@ -18,7 +18,7 @@ jobs:{% if "release_docs" in config.github_actions %}
       id-token: write
 
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           submodules: "true"
 
diff --git a/github/actions/py-test.yml b/github/actions/py-test.yml
index a8aa311..758f5f4 100644
--- a/github/actions/py-test.yml
+++ b/github/actions/py-test.yml
@@ -26,7 +26,7 @@ jobs:
     {% raw %}runs-on: ${{ matrix.os }}{% endraw %}
 
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           submodules: "true"
 
@@ -51,7 +51,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           submodules: "true"
 
diff --git a/github/actions/reformat.yml b/github/actions/reformat.yml
index 1beb0e4..eeaf064 100644
--- a/github/actions/reformat.yml
+++ b/github/actions/reformat.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           submodules: "true"
 
diff --git a/github/actions/release-docs.yml b/github/actions/release-docs.yml
index c404def..08ed3a5 100644
--- a/github/actions/release-docs.yml
+++ b/github/actions/release-docs.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           submodules: "true"
 
diff --git a/github/actions/resync-piped.yml b/github/actions/resync-piped.yml
index 90fa45e..64e45e8 100644
--- a/github/actions/resync-piped.yml
+++ b/github/actions/resync-piped.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           submodules: "true"
 
diff --git a/github/actions/rustfmt.yml b/github/actions/rustfmt.yml
index c53397e..a2c0c93 100644
--- a/github/actions/rustfmt.yml
+++ b/github/actions/rustfmt.yml
@@ -10,7 +10,7 @@ jobs:
   rustfmt:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           submodules: "true"
 
diff --git a/github/actions/type-check.yml b/github/actions/type-check.yml
index 92d5295..478ccbd 100644
--- a/github/actions/type-check.yml
+++ b/github/actions/type-check.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           submodules: "true"
 
diff --git a/github/actions/update-licence.yml b/github/actions/update-licence.yml
index b00cbca..4ab2f17 100644
--- a/github/actions/update-licence.yml
+++ b/github/actions/update-licence.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           submodules: "true"
 
diff --git a/github/actions/upgrade-locks.yml b/github/actions/upgrade-locks.yml
index 3b7813f..9bb574e 100644
--- a/github/actions/upgrade-locks.yml
+++ b/github/actions/upgrade-locks.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           submodules: "true"
 
diff --git a/github/actions/verify-locks.yml b/github/actions/verify-locks.yml
index 651326f..e53569b 100644
--- a/github/actions/verify-locks.yml
+++ b/github/actions/verify-locks.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           submodules: "true"
 
diff --git a/github/actions/verify-types.yml b/github/actions/verify-types.yml
index 9a88d46..4882a5d 100644
--- a/github/actions/verify-types.yml
+++ b/github/actions/verify-types.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           submodules: "true"