diff --git a/.github/workflows/group-apps-packages-ci.yml b/.github/workflows/group-apps-packages-ci.yml
index 23751a1..75fc238 100644
--- a/.github/workflows/group-apps-packages-ci.yml
+++ b/.github/workflows/group-apps-packages-ci.yml
@@ -43,7 +43,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/group-workbench-python-ci.yml b/.github/workflows/group-workbench-python-ci.yml
index 4d420ce..727ac43 100644
--- a/.github/workflows/group-workbench-python-ci.yml
+++ b/.github/workflows/group-workbench-python-ci.yml
@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
@@ -56,7 +56,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
@@ -142,7 +142,7 @@ jobs:
     name: Audit ${{ matrix.name }}
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/project-liminal-drift-ci.yml b/.github/workflows/project-liminal-drift-ci.yml
index 7caccc9..8b0ff70 100644
--- a/.github/workflows/project-liminal-drift-ci.yml
+++ b/.github/workflows/project-liminal-drift-ci.yml
@@ -27,7 +27,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/project-shika-ci.yml b/.github/workflows/project-shika-ci.yml
index 9d69f49..4e409b5 100644
--- a/.github/workflows/project-shika-ci.yml
+++ b/.github/workflows/project-shika-ci.yml
@@ -39,7 +39,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/project-youtube-auto-resume-ci.yml b/.github/workflows/project-youtube-auto-resume-ci.yml
index 12fdb0d..9b3effa 100644
--- a/.github/workflows/project-youtube-auto-resume-ci.yml
+++ b/.github/workflows/project-youtube-auto-resume-ci.yml
@@ -29,7 +29,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
           persist-credentials: false
diff --git a/.github/workflows/project-youtube-auto-resume-extension-ci.yml b/.github/workflows/project-youtube-auto-resume-extension-ci.yml
index 4180fb7..4137cec 100644
--- a/.github/workflows/project-youtube-auto-resume-extension-ci.yml
+++ b/.github/workflows/project-youtube-auto-resume-extension-ci.yml
@@ -29,7 +29,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/repo-codeql-security.yml b/.github/workflows/repo-codeql-security.yml
index 144c102..964a818 100644
--- a/.github/workflows/repo-codeql-security.yml
+++ b/.github/workflows/repo-codeql-security.yml
@@ -43,17 +43,17 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1
+        uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
         with:
           build-mode: none
           languages: javascript-typescript
 
       - name: Perform CodeQL analysis
-        uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1
+        uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
         with:
           category: "/language:javascript-typescript"
diff --git a/.github/workflows/repo-repository-contract-ci.yml b/.github/workflows/repo-repository-contract-ci.yml
index 124bf38..86da17a 100644
--- a/.github/workflows/repo-repository-contract-ci.yml
+++ b/.github/workflows/repo-repository-contract-ci.yml
@@ -21,7 +21,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false