diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7091680..295dc60 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -29,7 +29,7 @@ jobs:
     steps:
       - name: Check out repository
         # actions/checkout@v6.0.3 pinned to a commit SHA for supply-chain safety.
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
 
       - name: Set up JDK ${{ matrix.java }}
         # actions/setup-java@v5.2.0 pinned to a commit SHA.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index aca8541..fe80b4c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -25,7 +25,7 @@ jobs:
     steps:
       - name: Check out repository
         # actions/checkout@v6.0.3
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
 
       - name: Set up JDK
         # actions/setup-java@v5.2.0 — configures a settings.xml whose "github" server authenticates with the