diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml
index f8c6793cb55..9d5a071dca6 100644
--- a/.github/workflows/backport.yml
+++ b/.github/workflows/backport.yml
@@ -41,7 +41,7 @@ jobs:
             body: backport_start_body
           });
     - name: Checkout repo
-      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+      uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
       with:
         persist-credentials: true # We need to persist credentials to push the resulting changes upstream.
         fetch-depth: 0
diff --git a/.github/workflows/check-learning-path-links.yml b/.github/workflows/check-learning-path-links.yml
index dfe9d2d5e2d..c2a427fd77f 100644
--- a/.github/workflows/check-learning-path-links.yml
+++ b/.github/workflows/check-learning-path-links.yml
@@ -17,7 +17,7 @@ jobs:
 
     steps:
       - name: Checkout head
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           persist-credentials: true # need this for opening a PR
           fetch-depth: 0
@@ -30,7 +30,7 @@ jobs:
           echo "prev_sha=$prev_sha" >> $GITHUB_ENV
 
       - name: Checkout previous update
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           persist-credentials: false
           ref:  ${{ env.prev_sha }}
diff --git a/.github/workflows/check-markdown-links.yml b/.github/workflows/check-markdown-links.yml
index b8d9677b59a..b0843e38754 100644
--- a/.github/workflows/check-markdown-links.yml
+++ b/.github/workflows/check-markdown-links.yml
@@ -14,7 +14,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/cleanup-releases.yml b/.github/workflows/cleanup-releases.yml
index b385addba17..cb12d9f84d7 100644
--- a/.github/workflows/cleanup-releases.yml
+++ b/.github/workflows/cleanup-releases.yml
@@ -18,7 +18,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           persist-credentials: true # We need to persist credentials inorder to open a PR.
 
diff --git a/.github/workflows/generate-release-notes.yml b/.github/workflows/generate-release-notes.yml
index 2499cf7e240..3879ab2b54b 100644
--- a/.github/workflows/generate-release-notes.yml
+++ b/.github/workflows/generate-release-notes.yml
@@ -21,7 +21,7 @@ jobs:
 
     steps:
       - name: Checkout release branch
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           persist-credentials: false
           fetch-depth: 0 # Fetch the entire repo for the below git commit graph operations
@@ -65,7 +65,7 @@ jobs:
           BASELINE_TAG: ${{ inputs.baselineTag }}
 
       - name: Checkout main
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           persist-credentials: true # We need to persist credentials to push the resulting changes upstream.
           ref: main
diff --git a/.github/workflows/post-release.yml b/.github/workflows/post-release.yml
index fad5edbb556..263f130a162 100644
--- a/.github/workflows/post-release.yml
+++ b/.github/workflows/post-release.yml
@@ -29,7 +29,7 @@ jobs:
     # It's simpler than trying to parse our `eng/Versions.prop` due to the conditionals in it.
     steps:
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           persist-credentials: false
 
@@ -52,7 +52,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           persist-credentials: false
 
@@ -104,7 +104,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           persist-credentials: true # We need to persist credentials inorder to open a PR.
           ref: bot/${{ env.TARGET_BRANCH_POSTFIX }}
diff --git a/.github/workflows/spellcheck.yml b/.github/workflows/spellcheck.yml
index 9918ce2afec..c298172670f 100644
--- a/.github/workflows/spellcheck.yml
+++ b/.github/workflows/spellcheck.yml
@@ -13,7 +13,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/submit-to-do-issue.yml b/.github/workflows/submit-to-do-issue.yml
index 3c6c7dd3a58..34503e490fc 100644
--- a/.github/workflows/submit-to-do-issue.yml
+++ b/.github/workflows/submit-to-do-issue.yml
@@ -27,7 +27,7 @@ jobs:
             });
 
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/sync-branches.yml b/.github/workflows/sync-branches.yml
index d7d1552df63..03cd5da94db 100644
--- a/.github/workflows/sync-branches.yml
+++ b/.github/workflows/sync-branches.yml
@@ -23,7 +23,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           persist-credentials: true # We need to persist credentials to push the resulting changes upstream.
           fetch-depth: 0 # Fetch the entire repo for the below git operations
@@ -64,7 +64,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           persist-credentials: true # We need to persist credentials to push the resulting changes upstream.
           fetch-depth: 0 # Fetch the entire repo for the below git operations
diff --git a/.github/workflows/update-release-version.yml b/.github/workflows/update-release-version.yml
index dc77c31152f..5a24e677d99 100644
--- a/.github/workflows/update-release-version.yml
+++ b/.github/workflows/update-release-version.yml
@@ -31,7 +31,7 @@ jobs:
 
     steps:
       - name: Checkout branch
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           persist-credentials: true # We need to persist credentials to push the resulting changes upstream.