diff --git a/.github/workflows/code-quality-js.yml b/.github/workflows/code-quality-js.yml
index e45a38a..c3b2ccb 100644
--- a/.github/workflows/code-quality-js.yml
+++ b/.github/workflows/code-quality-js.yml
@@ -21,7 +21,7 @@ jobs:
 
         steps:
             -   name: Checkout repository
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
                 with:
                     # Do not store git credentials in .git -> could be leaked/exposed by infected/malicious action.
                     persist-credentials: false
diff --git a/.github/workflows/code-quality-php.yml b/.github/workflows/code-quality-php.yml
index 544f6e3..29b4dd5 100644
--- a/.github/workflows/code-quality-php.yml
+++ b/.github/workflows/code-quality-php.yml
@@ -25,13 +25,13 @@ jobs:
 
         steps:
             -   name: Checkout repository
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
                 with:
                     # Do not store git credentials in .git -> could be leaked/exposed by infected/malicious action.
                     persist-credentials: false
 
             -   name: Setup PHP and tools
-                uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2.37.1
+                uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # v2.37.2
                 with:
                     php-version: ${{ matrix.php }}
                     tools: composer:v2, cs2pr, phpcs
diff --git a/.github/workflows/composer-diff.yml b/.github/workflows/composer-diff.yml
index 84d5574..4a7c682 100644
--- a/.github/workflows/composer-diff.yml
+++ b/.github/workflows/composer-diff.yml
@@ -22,14 +22,14 @@ jobs:
             pull-requests: write  # Required to post the diff as a sticky comment
         steps:
             -   name: Checkout repository
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
                 with:
                     fetch-depth: 0 # Required for IonBazan/composer-diff-action
                     # Do not store git credentials in .git -> could be leaked/exposed by infected/malicious action.
                     persist-credentials: false
 
             -   name: Setup PHP and tools
-                uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2.37.1
+                uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # v2.37.2
                 with:
                     php-version: 8.3
                     tools: composer:v2
diff --git a/.github/workflows/example-plugin.yml b/.github/workflows/example-plugin.yml
index 184f099..07c765f 100644
--- a/.github/workflows/example-plugin.yml
+++ b/.github/workflows/example-plugin.yml
@@ -18,7 +18,7 @@ jobs:
             contents: write  # Required to upload assets to the GitHub release
         steps:
             -   name: Checkout repository
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
                 with:
                     # Do not store git credentials in .git -> could be leaked/exposed by infected/malicious action.
                     persist-credentials: false
@@ -40,7 +40,7 @@ jobs:
                 run: npm ci
 
             -   name: Setup PHP and tools
-                uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2.37.1
+                uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # v2.37.2
                 with:
                     php-version: 8.3
                     tools: composer:v2
diff --git a/.github/workflows/npm-package.yml b/.github/workflows/npm-package.yml
index 02f7951..a1c0978 100644
--- a/.github/workflows/npm-package.yml
+++ b/.github/workflows/npm-package.yml
@@ -15,7 +15,7 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             -   name: Checkout repository
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
                 with:
                     # Do not store git credentials in .git -> could be leaked/exposed by infected/malicious action.
                     persist-credentials: false
diff --git a/.github/workflows/php-package.yml b/.github/workflows/php-package.yml
index f3c0818..c5799c0 100644
--- a/.github/workflows/php-package.yml
+++ b/.github/workflows/php-package.yml
@@ -17,13 +17,13 @@ jobs:
             contents: write  # Required to upload assets to the GitHub release
         steps:
             -   name: Checkout repository
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
                 with:
                     # Do not store git credentials in .git -> could be leaked/exposed by infected/malicious action.
                     persist-credentials: false
 
             -   name: Setup PHP and tools
-                uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2.37.1
+                uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # v2.37.2
                 with:
                     php-version: 8.1
                     tools: composer:v2