diff --git a/.github/workflows/buildapk.yml b/.github/workflows/buildapk.yml
index 99ba089a..641fa90d 100644
--- a/.github/workflows/buildapk.yml
+++ b/.github/workflows/buildapk.yml
@@ -24,13 +24,13 @@ jobs:
 
     steps:
       - name: Checkout current repo
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1
 
       - name: Clone external repo
         run: git clone https://github.com/owncloud/android.git android-app
 
       - name: Setup JDK
-        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a #v5.5.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 #v5.6.0
         with:
           distribution: 'temurin'
           java-version: '17'
diff --git a/.github/workflows/cleanup.yml b/.github/workflows/cleanup.yml
index e2bf427a..c29700c6 100644
--- a/.github/workflows/cleanup.yml
+++ b/.github/workflows/cleanup.yml
@@ -26,7 +26,7 @@ jobs:
       SSH_USER: ${{ secrets.SSH_USER }}
 
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1
 
       # Install Ansible on the runner
       - name: Install Ansible
diff --git a/.github/workflows/compile.yml b/.github/workflows/compile.yml
index 740de0d1..0d4eacf2 100644
--- a/.github/workflows/compile.yml
+++ b/.github/workflows/compile.yml
@@ -13,10 +13,10 @@ jobs:
     steps:
 
       - name: Checkout repository
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up JDK 17
-        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a #v5.5.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 #v5.6.0
         with:
           java-version: '17'
           distribution: 'temurin'
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index 9de55c84..d5ed449d 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -37,7 +37,7 @@ jobs:
 
     steps:
       - name: Checkout external repo
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1
         with:
           repository: owncloud/android
           ref: ${{ env.APP_VERSION }}
diff --git a/.github/workflows/e2etests.yml b/.github/workflows/e2etests.yml
index 2bf951e4..aedc0e75 100644
--- a/.github/workflows/e2etests.yml
+++ b/.github/workflows/e2etests.yml
@@ -28,7 +28,7 @@ jobs:
 
     steps:
       - name: Checkout current repo
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1
 
       # Uploaded in the above
       - name: Download APK
diff --git a/.github/workflows/ocisbackend.yml b/.github/workflows/ocisbackend.yml
index 239936ff..a2a24bcc 100644
--- a/.github/workflows/ocisbackend.yml
+++ b/.github/workflows/ocisbackend.yml
@@ -53,7 +53,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1
 
       # If workflow_call secret exists, use it; otherwise use dispatch input
       - name: Set BASE_URL