diff --git a/.github/workflows/base-pkg-image.yml b/.github/workflows/base-pkg-image.yml
index 0fba8ee..121e366 100644
--- a/.github/workflows/base-pkg-image.yml
+++ b/.github/workflows/base-pkg-image.yml
@@ -23,7 +23,7 @@ jobs:
       contents: read
       packages: write
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - uses: extractions/setup-just@e33e0265a09d6d736e2ee1e0eb685ef1de4669ff # v3
 
       - name: Log in to GHCR
diff --git a/.github/workflows/ci-builder-image.yml b/.github/workflows/ci-builder-image.yml
index bc8f5f0..bbc8e20 100644
--- a/.github/workflows/ci-builder-image.yml
+++ b/.github/workflows/ci-builder-image.yml
@@ -28,7 +28,7 @@ jobs:
           - gnu
           - musl
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - uses: extractions/setup-just@e33e0265a09d6d736e2ee1e0eb685ef1de4669ff # v3
 
       - name: Log in to GHCR
diff --git a/.github/workflows/container.yaml b/.github/workflows/container.yaml
index 95e4618..2466cf6 100644
--- a/.github/workflows/container.yaml
+++ b/.github/workflows/container.yaml
@@ -50,7 +50,7 @@ jobs:
               pg_version: "18.0"
               os_version: alpine3.22.2
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - uses: docker/setup-qemu-action@v3
       - uses: taiki-e/install-action@v2
         with:
diff --git a/.github/workflows/create-release-pr.yaml b/.github/workflows/create-release-pr.yaml
index 6653908..9c448a9 100644
--- a/.github/workflows/create-release-pr.yaml
+++ b/.github/workflows/create-release-pr.yaml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # Checkout the full repository history
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index ad8522c..954ed86 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -46,7 +46,7 @@ jobs:
             pg:
               version: "18.0"
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Build the RPM (reuse workflow)
         uses: ./.github/workflows/build-rpm
@@ -83,7 +83,7 @@ jobs:
             pg:
               version: "18.0"
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Build and test
         uses: ./.github/workflows/build-and-test
@@ -104,7 +104,7 @@ jobs:
       - build-zip
     steps:
       # Checkout the repository
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       # Download all artifacts
       - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
diff --git a/.github/workflows/tag-release.yaml b/.github/workflows/tag-release.yaml
index e81626b..ccfabdb 100644
--- a/.github/workflows/tag-release.yaml
+++ b/.github/workflows/tag-release.yaml
@@ -24,7 +24,7 @@ jobs:
       contents: write
     steps:
       # Checkout the repository
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           token: ${{ secrets.RELEASE_PR_PAT }}
           fetch-depth: 0
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index c889b42..ff9b81d 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -42,7 +42,7 @@ jobs:
               pgrx-pg-version: pg18
               pkg-pg-version: 18.0
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Build & test the project
         uses: ./.github/workflows/build-and-test
@@ -80,7 +80,7 @@ jobs:
               pgrx-pg-version: pg18
               pkg-pg-version: 18.0
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Build & test the project
         uses: ./.github/workflows/build-and-test