diff --git a/.github/workflows/dns-apply.yml b/.github/workflows/dns-apply.yml
index 9384783f..c39abcae 100644
--- a/.github/workflows/dns-apply.yml
+++ b/.github/workflows/dns-apply.yml
@@ -17,7 +17,7 @@ jobs:
     strategy:
       fail-fast: true
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
       - uses: cachix/install-nix-action@4e002c8ec80594ecd40e759629461e26c8abed15 # v31
diff --git a/.github/workflows/dns-preview.yml b/.github/workflows/dns-preview.yml
index 9f4ebdfd..d3526e7c 100644
--- a/.github/workflows/dns-preview.yml
+++ b/.github/workflows/dns-preview.yml
@@ -16,7 +16,7 @@ jobs:
     strategy:
       fail-fast: false
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
       - uses: cachix/install-nix-action@4e002c8ec80594ecd40e759629461e26c8abed15 # v31
diff --git a/.github/workflows/format-pr.yml b/.github/workflows/format-pr.yml
index ac79d67c..acbfbaaa 100644
--- a/.github/workflows/format-pr.yml
+++ b/.github/workflows/format-pr.yml
@@ -66,7 +66,7 @@ jobs:
             core.setOutput('head_sha', pr.data.head.sha);
 
       - name: Checkout PR
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           ref: ${{ steps.pr.outputs.head_ref }}
           fetch-depth: 0