diff --git a/.github/workflows/draft-github-release.yml b/.github/workflows/draft-github-release.yml
index 5864db464e..362c955456 100644
--- a/.github/workflows/draft-github-release.yml
+++ b/.github/workflows/draft-github-release.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v3.5.0
         with:
           # We need to fetch the full repository in order to write complete
           # release notes.
diff --git a/.github/workflows/publish-on-npm.yml b/.github/workflows/publish-on-npm.yml
index 5bce285f59..58fe380136 100644
--- a/.github/workflows/publish-on-npm.yml
+++ b/.github/workflows/publish-on-npm.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # This action checks out at the commit of the tagged release.
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v3.5.0
       # Install all deps in preparation for creating a release.
       # Unlike publishing, this is done using the normal NPM registry
       # to download deps.