diff --git a/.github/workflows/cff.yml b/.github/workflows/cff.yml
index 12016f19..0f3f4c55 100644
--- a/.github/workflows/cff.yml
+++ b/.github/workflows/cff.yml
@@ -49,7 +49,7 @@ jobs:
     if: github.repository == 'kevinmatthes/aeruginous-rs'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.3
 
       - run: |
           rustup update
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 43ab3155..8edcab24 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -42,7 +42,7 @@ jobs:
   actionlint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.3
         with:
           persist-credentials: false
 
@@ -73,7 +73,7 @@ jobs:
     steps:
       - run: rustup update
 
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.3
         with:
           fetch-depth: 0
           persist-credentials: false
@@ -103,7 +103,7 @@ jobs:
     steps:
       - run: rustup update
 
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.3
         with:
           persist-credentials: false
 
@@ -117,7 +117,7 @@ jobs:
   cffconvert:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.3
         with:
           persist-credentials: false
 
@@ -140,7 +140,7 @@ jobs:
   renovate-linter:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.3
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/comment-changes.yml b/.github/workflows/comment-changes.yml
index f2f1eae6..0a7f9328 100644
--- a/.github/workflows/comment-changes.yml
+++ b/.github/workflows/comment-changes.yml
@@ -41,7 +41,7 @@ jobs:
   changelog:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.3
         with:
           fetch-depth: 0
           ref: ${{ github.head_ref }}
diff --git a/.github/workflows/logo.yml b/.github/workflows/logo.yml
index 143477e9..96ce534d 100644
--- a/.github/workflows/logo.yml
+++ b/.github/workflows/logo.yml
@@ -45,7 +45,7 @@ jobs:
   asymptote:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.3
         with:
           fetch-depth: 0
           ref: ${{ github.head_ref }}
diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml
index c818e609..c69c8904 100644
--- a/.github/workflows/mirror.yml
+++ b/.github/workflows/mirror.yml
@@ -58,7 +58,7 @@ jobs:
 
       - run: rustup update
 
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.3
         with:
           fetch-depth: 0
           persist-credentials: false
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 728370d8..b6e3190b 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -50,7 +50,7 @@ jobs:
         with:
           python-version: 3.11
 
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.3
         with:
           fetch-depth: 0
           persist-credentials: false
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5edca59d..eae245ec 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -46,7 +46,7 @@ jobs:
     if: github.repository == 'kevinmatthes/aeruginous-rs'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.3
 
       - id: tag_name
         run: echo "version=$(cat .version)" >> "$GITHUB_OUTPUT"
diff --git a/.github/workflows/ronlog.yml b/.github/workflows/ronlog.yml
index bf5537f7..cf9f2e75 100644
--- a/.github/workflows/ronlog.yml
+++ b/.github/workflows/ronlog.yml
@@ -55,7 +55,7 @@ jobs:
       github.repository == 'kevinmatthes/aeruginous-rs'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.3
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/rustfmt.yml b/.github/workflows/rustfmt.yml
index dcc20f0d..6548a5e9 100644
--- a/.github/workflows/rustfmt.yml
+++ b/.github/workflows/rustfmt.yml
@@ -46,7 +46,7 @@ jobs:
   reformat:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.3
         with:
           fetch-depth: 0
           ref: ${{ github.head_ref }}