diff --git a/.github/workflows/command-ref.yaml b/.github/workflows/command-ref.yaml
index 181f306..ddd3903 100644
--- a/.github/workflows/command-ref.yaml
+++ b/.github/workflows/command-ref.yaml
@@ -12,7 +12,7 @@ jobs:
   command-ref:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
       - name: Install uv
diff --git a/.github/workflows/deps.yaml b/.github/workflows/deps.yaml
index 1b3d5dd..233d279 100644
--- a/.github/workflows/deps.yaml
+++ b/.github/workflows/deps.yaml
@@ -12,7 +12,7 @@ jobs:
   deps:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
       - name: Install uv
diff --git a/.github/workflows/functional-full.yaml b/.github/workflows/functional-full.yaml
index 8ae5d57..90907c7 100644
--- a/.github/workflows/functional-full.yaml
+++ b/.github/workflows/functional-full.yaml
@@ -20,7 +20,7 @@ jobs:
           - '3.14'
     environment: personal-token
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
       - name: Install uv
diff --git a/.github/workflows/functional-limited.yaml b/.github/workflows/functional-limited.yaml
index 21a8de4..d4676d3 100644
--- a/.github/workflows/functional-limited.yaml
+++ b/.github/workflows/functional-limited.yaml
@@ -9,7 +9,7 @@ jobs:
   functional-limited:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
       - name: Install uv
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 87408a6..81ce860 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -12,7 +12,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
       - name: Install uv
diff --git a/.github/workflows/pipx.yaml b/.github/workflows/pipx.yaml
index f70162e..eed5152 100644
--- a/.github/workflows/pipx.yaml
+++ b/.github/workflows/pipx.yaml
@@ -12,7 +12,7 @@ jobs:
   pipx:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
       - name: Run gimmegit
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 03508c2..3366b5f 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     environment: publish-gimmegit
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
       - name: Install uv
diff --git a/.github/workflows/unit.yaml b/.github/workflows/unit.yaml
index 93ab924..a3f9ff7 100644
--- a/.github/workflows/unit.yaml
+++ b/.github/workflows/unit.yaml
@@ -20,7 +20,7 @@ jobs:
           - '3.13'
           - '3.14'
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
       - name: Install uv
diff --git a/.github/workflows/uvx.yaml b/.github/workflows/uvx.yaml
index dbae108..1093715 100644
--- a/.github/workflows/uvx.yaml
+++ b/.github/workflows/uvx.yaml
@@ -12,7 +12,7 @@ jobs:
   uvx:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
       - name: Install uv
diff --git a/.github/workflows/zizmor.yaml b/.github/workflows/zizmor.yaml
index eecd64b..8c609ad 100644
--- a/.github/workflows/zizmor.yaml
+++ b/.github/workflows/zizmor.yaml
@@ -15,7 +15,7 @@ jobs:
       security-events: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
       - name: Install uv