diff --git a/.github/workflows/codeql-javascript.yaml b/.github/workflows/codeql-javascript.yaml
index af645a1..c486cac 100644
--- a/.github/workflows/codeql-javascript.yaml
+++ b/.github/workflows/codeql-javascript.yaml
@@ -25,7 +25,7 @@ jobs:
     permissions:
       security-events: write
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - uses: github/codeql-action/init@e0647621c2984b5ed2f768cb892365bf2a616ad1 # v4.37.2
diff --git a/.github/workflows/test-javascript.yml b/.github/workflows/test-javascript.yml
index ebe39a7..8c693c6 100644
--- a/.github/workflows/test-javascript.yml
+++ b/.github/workflows/test-javascript.yml
@@ -22,7 +22,7 @@ jobs:
         node-version:
           - '24.x'
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       with:
         persist-credentials: false
     - name: with Node.js ${{ matrix.node-version }} on ${{ matrix.os }}
diff --git a/.github/workflows/zizmor-analysis.yaml b/.github/workflows/zizmor-analysis.yaml
index 366ba2f..99b93d9 100644
--- a/.github/workflows/zizmor-analysis.yaml
+++ b/.github/workflows/zizmor-analysis.yaml
@@ -22,7 +22,7 @@ jobs:
       security-events: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false