diff --git a/.github/workflows/build-and-deploy.yml b/.github/workflows/build-and-deploy.yml
index 8148460..e8655f7 100644
--- a/.github/workflows/build-and-deploy.yml
+++ b/.github/workflows/build-and-deploy.yml
@@ -33,7 +33,7 @@ jobs:
         if: ${{ inputs.branch == 'main' }}
         run: echo ${{ inputs.branch }}
       # This should be set up from earlier
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag: v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag: v4.2.0
       - uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # tag: v4.0.4
         with:
           node-version: 20
diff --git a/.github/workflows/check-blog-links.yml b/.github/workflows/check-blog-links.yml
index bab6ed7..49cba4f 100644
--- a/.github/workflows/check-blog-links.yml
+++ b/.github/workflows/check-blog-links.yml
@@ -14,7 +14,7 @@ jobs:
       contents: read
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - name: Setup Node.js
         uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
         with:
diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml
index b956d30..9f77db6 100644
--- a/.github/workflows/pull-request.yml
+++ b/.github/workflows/pull-request.yml
@@ -13,7 +13,7 @@ jobs:
     name: Test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag: v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag: v4.2.0
 
       - uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # tag: v4.0.4
         with:
diff --git a/.github/workflows/push-main.yml b/.github/workflows/push-main.yml
index f09b2a0..2bd2c5a 100644
--- a/.github/workflows/push-main.yml
+++ b/.github/workflows/push-main.yml
@@ -17,7 +17,7 @@ jobs:
     name: Upload to Crowdin
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag: v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag: v4.2.0
       - uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # tag: v4.0.4
         with:
           node-version: 20
diff --git a/.github/workflows/update-docs-branch.yml b/.github/workflows/update-docs-branch.yml
index 6236875..1db724a 100644
--- a/.github/workflows/update-docs-branch.yml
+++ b/.github/workflows/update-docs-branch.yml
@@ -26,7 +26,7 @@ jobs:
         id: generate-token
         with:
           creds: ${{ secrets.DOCS_UPDATER_GH_APP_CREDS }}
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag: v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag: v4.2.0
         with:
           token: ${{ steps.generate-token.outputs.token }}
       - name: Switch branches
diff --git a/.github/workflows/update-docs.yml b/.github/workflows/update-docs.yml
index 67714cf..7c86417 100644
--- a/.github/workflows/update-docs.yml
+++ b/.github/workflows/update-docs.yml
@@ -26,7 +26,7 @@ jobs:
         id: generate-token
         with:
           creds: ${{ secrets.DOCS_UPDATER_GH_APP_CREDS }}
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag: v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag: v4.2.0
         with:
           token: ${{ steps.generate-token.outputs.token }}
       - uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # tag: v4.0.4
diff --git a/.github/workflows/update-i18n-deploy.yml b/.github/workflows/update-i18n-deploy.yml
index 339a56e..1746271 100644
--- a/.github/workflows/update-i18n-deploy.yml
+++ b/.github/workflows/update-i18n-deploy.yml
@@ -13,7 +13,7 @@ jobs:
     name: 'Build and deploy localized site'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag: v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag: v4.2.0
 
       - uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # tag: v4.0.4
         with: