diff --git a/.github/workflows/build-debian-multiarch.yml b/.github/workflows/build-debian-multiarch.yml
index fbf49a96f4..cf57642085 100644
--- a/.github/workflows/build-debian-multiarch.yml
+++ b/.github/workflows/build-debian-multiarch.yml
@@ -47,7 +47,7 @@ jobs:
         arch: [s390x, ppc64le]
 
     steps:
-    - uses: actions/checkout@v3.5.2
+    - uses: actions/checkout@v3.5.3
 
     - name: Build sources and run tests
       uses: uraimo/run-on-arch-action@v2.5.0
diff --git a/.github/workflows/build-emsdk.yml b/.github/workflows/build-emsdk.yml
index 73b89ecba8..e2b7f1f3e2 100644
--- a/.github/workflows/build-emsdk.yml
+++ b/.github/workflows/build-emsdk.yml
@@ -47,7 +47,7 @@ jobs:
       WHEELHOUSE_CYTHON: /tmp/wheelhouse/cython
 
     steps:
-    - uses: actions/checkout@v3.5.2
+    - uses: actions/checkout@v3.5.3
 
     - name: Cache Cython
       id: cache-cython
diff --git a/.github/workflows/build-macos.yml b/.github/workflows/build-macos.yml
index f9fa17b076..65e5cbe231 100644
--- a/.github/workflows/build-macos.yml
+++ b/.github/workflows/build-macos.yml
@@ -45,7 +45,7 @@ jobs:
         macarch: [arm64, x86_64]
 
     steps:
-      - uses: actions/checkout@v3.5.2
+      - uses: actions/checkout@v3.5.3
 
       - name: Test for Mac Deps cache hit
         id: macdep-cache
@@ -150,7 +150,7 @@ jobs:
       CIBW_BUILD_VERBOSITY: 2
 
     steps:
-      - uses: actions/checkout@v3.5.2
+      - uses: actions/checkout@v3.5.3
 
       - name: pip cache
         uses: actions/cache@v3.3.1
diff --git a/.github/workflows/build-manylinux.yml b/.github/workflows/build-manylinux.yml
index 6a760bbbaa..357876c699 100644
--- a/.github/workflows/build-manylinux.yml
+++ b/.github/workflows/build-manylinux.yml
@@ -79,7 +79,7 @@ jobs:
       CIBW_BUILD_VERBOSITY: 2
 
     steps:
-    - uses: actions/checkout@v3.5.2
+    - uses: actions/checkout@v3.5.3
 
     - name: Log in to the Container registry
       uses: docker/login-action@f4ef78c080cd8ba55a85445d5b36e214a81df20a
diff --git a/.github/workflows/build-ubuntu-sdist.yml b/.github/workflows/build-ubuntu-sdist.yml
index 0f80b4843b..e5bc7cad4b 100644
--- a/.github/workflows/build-ubuntu-sdist.yml
+++ b/.github/workflows/build-ubuntu-sdist.yml
@@ -51,7 +51,7 @@ jobs:
         os: [ubuntu-20.04, ubuntu-22.04]
 
     steps:
-    - uses: actions/checkout@v3.5.2
+    - uses: actions/checkout@v3.5.3
 
     - name: Install deps
       # install numpy from pip and not apt because the one from pip is newer,
diff --git a/.github/workflows/build-windows.yml b/.github/workflows/build-windows.yml
index 250cd35c28..48704681df 100644
--- a/.github/workflows/build-windows.yml
+++ b/.github/workflows/build-windows.yml
@@ -146,7 +146,7 @@ jobs:
       CIBW_BUILD_VERBOSITY: 2
 
     steps:
-      - uses: actions/checkout@v3.5.2
+      - uses: actions/checkout@v3.5.3
 
       - uses: TheMrMilchmann/setup-msvc-dev@v2  # this lets us use the developer command prompt on windows
         with:
diff --git a/.github/workflows/cppcheck.yml b/.github/workflows/cppcheck.yml
index 711401359b..cfce2f69ff 100644
--- a/.github/workflows/cppcheck.yml
+++ b/.github/workflows/cppcheck.yml
@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-20.04
 
     steps:
-      - uses: actions/checkout@v3.5.2
+      - uses: actions/checkout@v3.5.3
 
       - name: Install deps
         run: |
diff --git a/.github/workflows/format-lint.yml b/.github/workflows/format-lint.yml
index 05eea364e4..c79acaf2c7 100644
--- a/.github/workflows/format-lint.yml
+++ b/.github/workflows/format-lint.yml
@@ -29,7 +29,7 @@ jobs:
     runs-on: ubuntu-22.04
 
     steps:
-      - uses: actions/checkout@v3.5.2
+      - uses: actions/checkout@v3.5.3
 
       - name: Install deps
         run: python3 -m pip install pylint black clang-format sphinx
diff --git a/.github/workflows/release-gh-draft.yml b/.github/workflows/release-gh-draft.yml
index f17af020eb..fcecb4976f 100644
--- a/.github/workflows/release-gh-draft.yml
+++ b/.github/workflows/release-gh-draft.yml
@@ -21,7 +21,7 @@ jobs:
     needs: [manylinux, macos, windows, sdist]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.5.2
+      - uses: actions/checkout@v3.5.3
 
       - name: Download all artifacts
         uses: actions/download-artifact@v3
diff --git a/.github/workflows/release-pypi.yml b/.github/workflows/release-pypi.yml
index a2b37ea970..6442134ca5 100644
--- a/.github/workflows/release-pypi.yml
+++ b/.github/workflows/release-pypi.yml
@@ -8,7 +8,7 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.5.2
+      - uses: actions/checkout@v3.5.3
 
       - name: Pull all release assets
         uses: robinraju/release-downloader@v1.8