diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 76db5b7..694a0d4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -37,7 +37,7 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
 
@@ -61,7 +61,7 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
 
@@ -85,7 +85,7 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
 
@@ -122,7 +122,7 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a293ceb..9e534bc 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -119,7 +119,7 @@ jobs:
 
     steps:
       - name: Check out release tag
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           ref: ${{ env.RELEASE_TAG }}
           fetch-depth: 0
@@ -163,7 +163,7 @@ jobs:
 
     steps:
       - name: Check out release tag
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           ref: ${{ env.RELEASE_TAG }}
           fetch-depth: 0
diff --git a/tests/test_release_workflows.py b/tests/test_release_workflows.py
index 7217620..5bb7e59 100644
--- a/tests/test_release_workflows.py
+++ b/tests/test_release_workflows.py
@@ -146,8 +146,9 @@ def test_workflows_pin_node24_capable_first_party_actions() -> None:
     for path in WORKFLOWS:
         text = path.read_text(encoding="utf-8")
 
-        assert "actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd" in text
+        assert "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" in text
         assert "actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405" in text
+        assert "actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd" not in text
         assert "actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5" not in text
         assert "actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065" not in text