diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 694a0d4..dcc5890 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -37,7 +37,7 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 0
 
@@ -61,7 +61,7 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 0
 
@@ -85,7 +85,7 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 0
 
@@ -122,7 +122,7 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 62c8ed0..6c4327b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -124,7 +124,7 @@ jobs:
 
     steps:
       - name: Check out release tag
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           ref: ${{ env.RELEASE_TAG }}
           fetch-depth: 0
@@ -168,7 +168,7 @@ jobs:
 
     steps:
       - name: Check out release tag
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           ref: ${{ env.RELEASE_TAG }}
           fetch-depth: 0
@@ -327,7 +327,7 @@ jobs:
           PY
 
       - name: Check out release tag
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           ref: ${{ env.RELEASE_TAG }}
           fetch-depth: 0
diff --git a/tests/test_release_workflows.py b/tests/test_release_workflows.py
index b9ed19a..d14b98e 100644
--- a/tests/test_release_workflows.py
+++ b/tests/test_release_workflows.py
@@ -171,7 +171,7 @@ def test_workflows_pin_node24_capable_first_party_actions() -> None:
     for path in WORKFLOWS:
         text = path.read_text(encoding="utf-8")
 
-        assert "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" in text
+        assert "actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10" in text
         assert "actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405" in text
         assert "actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd" not in text
         assert "actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5" not in text