diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index b9ab577e1d..89e2a97531 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -14,7 +14,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - uses: ./.github/actions/setup
         with:
           extras: "-E pandas"
@@ -24,7 +24,7 @@ jobs:
   build_docs:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - uses: ./.github/actions/setup
       - name: Build docs
         run: cd docs && make html SPHINXOPTS="-W --keep-going"
@@ -32,7 +32,7 @@ jobs:
   build_package:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - uses: ./.github/actions/setup
       - name: Build package
         run: poetry build
@@ -40,7 +40,7 @@ jobs:
   test_core:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - uses: ./.github/actions/setup
       - name: Test core
         run: pytest tests/tests_unit -n8 --dist loadscope --maxfail 10 -m 'not dsl' --test-deps-only-core
@@ -53,7 +53,7 @@ jobs:
         os: [ubuntu-latest, windows-latest]
         python-version: ["3.10", "3.11", "3.12", "3.13"]
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - uses: ./.github/actions/setup
         with:
           python_version: ${{ matrix.python-version }}
diff --git a/.github/workflows/cdf_auth.yaml b/.github/workflows/cdf_auth.yaml
index 97bcc2842f..4e379b463f 100644
--- a/.github/workflows/cdf_auth.yaml
+++ b/.github/workflows/cdf_auth.yaml
@@ -24,7 +24,7 @@ jobs:
         PROVIDER: "entra_id"
         LOGIN_FLOW: "client_credentials"
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - name: Build the CDF Groups
         working-directory: scripts/toolkit
         run: cdf build --env ${{ matrix.cdf_project }}
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index c58787e2f5..0b2b6e9d7f 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -10,7 +10,7 @@ jobs:
     runs-on: windows-latest
     environment: CD
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - uses: ./.github/actions/setup
         with:
           extras: '-E all'
diff --git a/.github/workflows/verify-jupyter.yml b/.github/workflows/verify-jupyter.yml
index 4e91b42466..99b69882f5 100644
--- a/.github/workflows/verify-jupyter.yml
+++ b/.github/workflows/verify-jupyter.yml
@@ -9,7 +9,7 @@ jobs:
   build_and_test_jupyter_pyodide:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
           python-version: '3.10'
diff --git a/.github/workflows/verify-streamlit.yml b/.github/workflows/verify-streamlit.yml
index e59cc677a1..5dce5f2b40 100644
--- a/.github/workflows/verify-streamlit.yml
+++ b/.github/workflows/verify-streamlit.yml
@@ -9,7 +9,7 @@ jobs:
   build_and_test_streamlit_pyodide:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
           python-version: '3.10'