diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index ac4d073..cd48a80 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -28,14 +28,14 @@ jobs:
     steps:
       - name: Checkout repository
         # Pin the action to an immutable commit to reduce supply-chain risk.
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
 
       - name: Initialize CodeQL
         # Pin the action to an immutable commit to reduce supply-chain risk.
-        uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225
+        uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9
         with:
           languages: ${{ matrix.language }}
 
       - name: Analyze
         # Pin the action to an immutable commit to reduce supply-chain risk.
-        uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225
+        uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index d48427a..9f6da9f 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
 
       - name: Setup pnpm
         uses: pnpm/action-setup@6e7bdbda5fe05107efc88b23b7ed00aa05f84ca0
diff --git a/.github/workflows/sync-vercel-project-settings.yml b/.github/workflows/sync-vercel-project-settings.yml
index 215e46d..bb8eb59 100644
--- a/.github/workflows/sync-vercel-project-settings.yml
+++ b/.github/workflows/sync-vercel-project-settings.yml
@@ -18,7 +18,7 @@ jobs:
     steps:
       - name: Checkout repository
         # Pin the action to an immutable commit to reduce supply-chain risk.
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
 
       - name: Setup Node.js
         # Pin the action to an immutable commit to reduce supply-chain risk.
diff --git a/.github/workflows/update-screenshots.yml b/.github/workflows/update-screenshots.yml
index 9a56dfb..833078c 100644
--- a/.github/workflows/update-screenshots.yml
+++ b/.github/workflows/update-screenshots.yml
@@ -24,7 +24,7 @@ jobs:
     steps:
       - name: Checkout repository
         # Pin the action to an immutable commit to reduce supply-chain risk.
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
         with:
           fetch-depth: 0
           # Authenticate git with the PR-creation PAT so the screenshot branch