diff --git a/.github/workflows/dist-python.yml b/.github/workflows/dist-python.yml
index 5488165..1371812 100644
--- a/.github/workflows/dist-python.yml
+++ b/.github/workflows/dist-python.yml
@@ -28,9 +28,7 @@ jobs:
     name: Make Dist
     runs-on: macos-latest
     permissions:
-      contents: write
-    steps:
-      - uses: actions/checkout@v5
+      contents: write      - uses: actions/checkout@v6
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/test-python.yml b/.github/workflows/test-python.yml
index 7fe1572..25361d0 100644
--- a/.github/workflows/test-python.yml
+++ b/.github/workflows/test-python.yml
@@ -28,7 +28,9 @@ jobs:
           - ["Replica Sets", "tests/test_replica_sets.py", "3.12"]
           - ["Sharded", "tests/test_sharded_clusters.py", "3.14"]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
+        with:
+          persist-credentials: false
       - name: Setup Python
         uses: actions/setup-python@v6
         with:
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 1989762..e3b54ca 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -14,8 +14,8 @@ jobs:
       security-events: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
       - name: Run zizmor 🌈
-        uses: zizmorcore/zizmor-action@9d985c6a33094e632ee3e60d1924caa8588dc5db
+        uses: zizmorcore/zizmor-action@c0e2b1c877e25a91d1d747c438d49199cad29698