diff --git a/.github/workflows/api-testing.yml b/.github/workflows/api-testing.yml
index 8b5b911..c2a2068 100644
--- a/.github/workflows/api-testing.yml
+++ b/.github/workflows/api-testing.yml
@@ -47,7 +47,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903
         with:
           node-version: '20'
@@ -103,7 +103,7 @@ jobs:
     needs: contract
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - name: Run k6 load test
         uses: grafana/k6-action@e4714b734f2b0afaabeb7b4a69142745548ab9ec
         with:
@@ -117,7 +117,7 @@ jobs:
     needs: contract
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - name: OWASP ZAP API scan
         uses: zaproxy/action-api-scan@5158fe4d9d8fcc75ea204db81317cce7f9e5453d
         with:
diff --git a/.github/workflows/artifact-management.yml b/.github/workflows/artifact-management.yml
index 9946dcb..3365197 100644
--- a/.github/workflows/artifact-management.yml
+++ b/.github/workflows/artifact-management.yml
@@ -40,7 +40,7 @@ jobs:
   cleanup:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - name: Purge old workflow artifacts
         env:
           GH_TOKEN: ${{ secrets.GH_TOKEN }}
diff --git a/.github/workflows/auto-upgrade-pyproject.yml b/.github/workflows/auto-upgrade-pyproject.yml
index 4449aa5..51d65a4 100644
--- a/.github/workflows/auto-upgrade-pyproject.yml
+++ b/.github/workflows/auto-upgrade-pyproject.yml
@@ -14,7 +14,7 @@ jobs:
   upgrade:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Set up Python
         uses: actions/setup-python@v6
diff --git a/.github/workflows/aws-lambda-deploy.yml b/.github/workflows/aws-lambda-deploy.yml
index e216ba8..9ef60ec 100644
--- a/.github/workflows/aws-lambda-deploy.yml
+++ b/.github/workflows/aws-lambda-deploy.yml
@@ -31,7 +31,7 @@ jobs:
       matrix:
         function: ${{ fromJSON(inputs.functions) }}
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
         with:
           fetch-depth: 2
       - name: Configure AWS credentials
diff --git a/.github/workflows/bash-unit-tests.yml b/.github/workflows/bash-unit-tests.yml
index 34310d3..b9faa75 100644
--- a/.github/workflows/bash-unit-tests.yml
+++ b/.github/workflows/bash-unit-tests.yml
@@ -12,7 +12,7 @@ jobs:
   bats:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Install bats-core
         run: |
           sudo apt-get update
diff --git a/.github/workflows/changelog-auto-pr.yml b/.github/workflows/changelog-auto-pr.yml
index cfaee6d..bcb9738 100644
--- a/.github/workflows/changelog-auto-pr.yml
+++ b/.github/workflows/changelog-auto-pr.yml
@@ -17,7 +17,7 @@ jobs:
   generate:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
         with:
           fetch-depth: 0
       - name: Install git-cliff
diff --git a/.github/workflows/ci-tests.yml b/.github/workflows/ci-tests.yml
index 1308e12..1d4792a 100644
--- a/.github/workflows/ci-tests.yml
+++ b/.github/workflows/ci-tests.yml
@@ -11,7 +11,7 @@ jobs:
   python-tests:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: actions/setup-python@v5
         with:
           python-version: '3.12'
@@ -29,7 +29,7 @@ jobs:
   bash-tests:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Install bats
         run: |
           sudo apt-get update
@@ -40,7 +40,7 @@ jobs:
   meta-tests:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: actions/setup-node@v4
         with:
           node-version: '20'
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 19f2112..852560f 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -14,7 +14,7 @@ jobs:
       matrix:
         language: [python, javascript, go]
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - uses: github/codeql-action/init@ad2a4837011b42f6947b78d6417e7c253b1c504b
         with:
           languages: ${{ matrix.language }}
diff --git a/.github/workflows/concurrency-caching.yml b/.github/workflows/concurrency-caching.yml
index d011f60..fd6421d 100644
--- a/.github/workflows/concurrency-caching.yml
+++ b/.github/workflows/concurrency-caching.yml
@@ -11,7 +11,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903
         with:
           node-version: '20'
diff --git a/.github/workflows/conventional-commits.yml b/.github/workflows/conventional-commits.yml
index 1b6d774..57062d9 100644
--- a/.github/workflows/conventional-commits.yml
+++ b/.github/workflows/conventional-commits.yml
@@ -8,7 +8,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
         with:
           fetch-depth: 0
       - name: Conventional commits check (PR only)
diff --git a/.github/workflows/coverage-report.yml b/.github/workflows/coverage-report.yml
index 6cd28bf..d8293e3 100644
--- a/.github/workflows/coverage-report.yml
+++ b/.github/workflows/coverage-report.yml
@@ -23,7 +23,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - uses: actions/setup-python@cfd55ca82492758d853442341ad4d8010466803a
         with:
           python-version: ${{ inputs.python-version }}
diff --git a/.github/workflows/database-migration.yml b/.github/workflows/database-migration.yml
index e046dfd..01db1f3 100644
--- a/.github/workflows/database-migration.yml
+++ b/.github/workflows/database-migration.yml
@@ -47,7 +47,7 @@ jobs:
       FLYWAY_LICENSE_KEY: ${{ secrets.flyway-license-key }}
     steps:
       - name: Checkout
-        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
 
       - name: Setup Flyway
         if: inputs.tool == 'flyway'
diff --git a/.github/workflows/deno-ci.yml b/.github/workflows/deno-ci.yml
index c200ec2..33b7bc5 100644
--- a/.github/workflows/deno-ci.yml
+++ b/.github/workflows/deno-ci.yml
@@ -45,7 +45,7 @@ jobs:
       run:
         shell: bash
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - name: Setup Deno
         uses: denoland/setup-deno@e95548e56dfa95d4e1a28d6f422fafe75c4c26fb
         with:
diff --git a/.github/workflows/docker-build-push.yml b/.github/workflows/docker-build-push.yml
index f2c8ed9..205db9f 100644
--- a/.github/workflows/docker-build-push.yml
+++ b/.github/workflows/docker-build-push.yml
@@ -49,7 +49,7 @@ jobs:
       packages: write
       id-token: write
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - name: Validate inputs
         shell: bash
         run: |
diff --git a/.github/workflows/dotnet-ci.yml b/.github/workflows/dotnet-ci.yml
index 574f9d0..4129342 100644
--- a/.github/workflows/dotnet-ci.yml
+++ b/.github/workflows/dotnet-ci.yml
@@ -33,7 +33,7 @@ jobs:
       matrix:
         framework: ${{ fromJSON(inputs.frameworks) }}
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - name: Setup .NET
         uses: actions/setup-dotnet@d4c94342e560b34958eacfc5d055d21461ed1c5d
         with:
diff --git a/.github/workflows/examples-smoke.yml b/.github/workflows/examples-smoke.yml
index 61ed5dd..cfa9f20 100644
--- a/.github/workflows/examples-smoke.yml
+++ b/.github/workflows/examples-smoke.yml
@@ -35,7 +35,7 @@ jobs:
 
     steps:
       # Pin to a specific commit for reproducibility (update occasionally)
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       # ---------- Common tooling ----------
       - name: Install actionlint
         run: |
@@ -228,7 +228,7 @@ jobs:
   references:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Install ripgrep
         run: sudo apt-get update && sudo apt-get install -y ripgrep
       - name: Ensure workflows use collection
diff --git a/.github/workflows/go-ci.yml b/.github/workflows/go-ci.yml
index f308428..99d9831 100644
--- a/.github/workflows/go-ci.yml
+++ b/.github/workflows/go-ci.yml
@@ -15,7 +15,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - name: Set up Go
         uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
         with:
diff --git a/.github/workflows/helm-chart-lint-test.yml b/.github/workflows/helm-chart-lint-test.yml
index 1ecbdf5..9845c63 100644
--- a/.github/workflows/helm-chart-lint-test.yml
+++ b/.github/workflows/helm-chart-lint-test.yml
@@ -23,7 +23,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - name: Install Helm
         run: |
           curl -fsSL https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash
diff --git a/.github/workflows/infra-lint.yml b/.github/workflows/infra-lint.yml
index bc7ec84..3c97d93 100644
--- a/.github/workflows/infra-lint.yml
+++ b/.github/workflows/infra-lint.yml
@@ -14,7 +14,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - name: Terraform lint
         run: |
           curl -s https://raw.githubusercontent.com/terraform-linters/tflint/master/install_linux.sh | bash
diff --git a/.github/workflows/java-ci.yml b/.github/workflows/java-ci.yml
index e927cd9..537fbb1 100644
--- a/.github/workflows/java-ci.yml
+++ b/.github/workflows/java-ci.yml
@@ -15,7 +15,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - name: Set up JDK
         uses: actions/setup-java@387ac29b308b003ca37ba93a6cab5eb57c8f5f93
         with:
diff --git a/.github/workflows/js-unit-tests.yml b/.github/workflows/js-unit-tests.yml
index 99c60c0..a7966d5 100644
--- a/.github/workflows/js-unit-tests.yml
+++ b/.github/workflows/js-unit-tests.yml
@@ -12,7 +12,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: actions/setup-node@v4
         with:
           node-version: '20'
diff --git a/.github/workflows/lockfile-consistency.yml b/.github/workflows/lockfile-consistency.yml
index b5c5a65..dbe6edd 100644
--- a/.github/workflows/lockfile-consistency.yml
+++ b/.github/workflows/lockfile-consistency.yml
@@ -16,7 +16,7 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - name: Check Poetry lock
         if: hashFiles('pyproject.toml') != '' && hashFiles('poetry.lock') != ''
         run: |
diff --git a/.github/workflows/multi-cloud-deploy.yml b/.github/workflows/multi-cloud-deploy.yml
index 1d85637..019225c 100644
--- a/.github/workflows/multi-cloud-deploy.yml
+++ b/.github/workflows/multi-cloud-deploy.yml
@@ -83,7 +83,7 @@ jobs:
         shell: bash
         working-directory: ${{ inputs.working-directory }}
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - name: Load env file
         if: inputs.env-file != ''
         run: |
diff --git a/.github/workflows/node-ci.yml b/.github/workflows/node-ci.yml
index 260a6aa..7030d27 100644
--- a/.github/workflows/node-ci.yml
+++ b/.github/workflows/node-ci.yml
@@ -27,7 +27,7 @@ jobs:
       run:
         shell: bash
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903
         with:
           node-version: ${{ inputs.node-version }}
diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
index f0f1d69..6831599 100644
--- a/.github/workflows/npm-publish.yml
+++ b/.github/workflows/npm-publish.yml
@@ -30,7 +30,7 @@ jobs:
       run:
         working-directory: ${{ inputs.working-directory }}
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903
         with:
           node-version: ${{ inputs.node-version }}
diff --git a/.github/workflows/permissions-template.yml b/.github/workflows/permissions-template.yml
index ede7ee2..31a5826 100644
--- a/.github/workflows/permissions-template.yml
+++ b/.github/workflows/permissions-template.yml
@@ -10,7 +10,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
   release:
     if: startsWith(github.ref, 'refs/tags/')
     needs: test
diff --git a/.github/workflows/publish-docker-on-tag.yml b/.github/workflows/publish-docker-on-tag.yml
index 90b789b..7e8b87f 100644
--- a/.github/workflows/publish-docker-on-tag.yml
+++ b/.github/workflows/publish-docker-on-tag.yml
@@ -70,7 +70,7 @@ jobs:
       # Repository name (lowercased in shell when needed)
       REPO: ${{ github.repository }}
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130
diff --git a/.github/workflows/publish-to-npm.yml b/.github/workflows/publish-to-npm.yml
index 18a288d..e55e549 100644
--- a/.github/workflows/publish-to-npm.yml
+++ b/.github/workflows/publish-to-npm.yml
@@ -14,7 +14,7 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903
         with:
           node-version: ${{ inputs.node-version }}
diff --git a/.github/workflows/publish-to-pypi.yml b/.github/workflows/publish-to-pypi.yml
index f033bf3..8578390 100644
--- a/.github/workflows/publish-to-pypi.yml
+++ b/.github/workflows/publish-to-pypi.yml
@@ -19,7 +19,7 @@ jobs:
   build-and-publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - uses: actions/setup-python@cfd55ca82492758d853442341ad4d8010466803a
         with:
           python-version: ${{ inputs.python-version }}
diff --git a/.github/workflows/pypi-publish.yml b/.github/workflows/pypi-publish.yml
index d0ab470..ea202ef 100644
--- a/.github/workflows/pypi-publish.yml
+++ b/.github/workflows/pypi-publish.yml
@@ -35,7 +35,7 @@ jobs:
     environment: ${{ inputs.environment }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - uses: actions/setup-python@cfd55ca82492758d853442341ad4d8010466803a
         with:
           python-version: ${{ inputs.python-version }}
diff --git a/.github/workflows/python-lint.yml b/.github/workflows/python-lint.yml
index 0fdf80c..36f9e7f 100644
--- a/.github/workflows/python-lint.yml
+++ b/.github/workflows/python-lint.yml
@@ -23,7 +23,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - name: Lint & Type Check
         uses: ./.github/actions/python-lint
         with:
diff --git a/.github/workflows/python-test-matrix.yml b/.github/workflows/python-test-matrix.yml
index 6f90394..71d4f29 100644
--- a/.github/workflows/python-test-matrix.yml
+++ b/.github/workflows/python-test-matrix.yml
@@ -33,7 +33,7 @@ jobs:
         os: ${{ fromJson(inputs.os-matrix) }}
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - uses: actions/setup-python@cfd55ca82492758d853442341ad4d8010466803a
         with:
           python-version: ${{ matrix.python }}
diff --git a/.github/workflows/python-type-check.yml b/.github/workflows/python-type-check.yml
index 4391fad..d70350d 100644
--- a/.github/workflows/python-type-check.yml
+++ b/.github/workflows/python-type-check.yml
@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Type check project sources
         uses: ./.github/actions/python-type-check
         with:
diff --git a/.github/workflows/python-unit-tests.yml b/.github/workflows/python-unit-tests.yml
index 49a8845..d3bafb3 100644
--- a/.github/workflows/python-unit-tests.yml
+++ b/.github/workflows/python-unit-tests.yml
@@ -13,7 +13,7 @@ jobs:
   tests:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: actions/setup-python@v5
         with:
           python-version: '3.12'
diff --git a/.github/workflows/pytorch-train-deploy.yml b/.github/workflows/pytorch-train-deploy.yml
index 694a5a3..45c8e33 100644
--- a/.github/workflows/pytorch-train-deploy.yml
+++ b/.github/workflows/pytorch-train-deploy.yml
@@ -36,7 +36,7 @@ jobs:
       image: pytorch/pytorch:2.1.2-cuda11.8-cudnn8-runtime
       options: --gpus all
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - uses: actions/setup-python@cfd55ca82492758d853442341ad4d8010466803a
         with:
           python-version: ${{ inputs.python-version }}
diff --git a/.github/workflows/r-cmd-check.yml b/.github/workflows/r-cmd-check.yml
index 9e76505..eb9a048 100644
--- a/.github/workflows/r-cmd-check.yml
+++ b/.github/workflows/r-cmd-check.yml
@@ -28,7 +28,7 @@ jobs:
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Setup R
         uses: ./.github/actions/setup-r
         with:
diff --git a/.github/workflows/r-lint.yml b/.github/workflows/r-lint.yml
index 1b02371..09b3891 100644
--- a/.github/workflows/r-lint.yml
+++ b/.github/workflows/r-lint.yml
@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Run R lintr checks
         uses: ./.github/actions/r-lint
         with:
diff --git a/.github/workflows/r-testthat.yml b/.github/workflows/r-testthat.yml
index 48a5bc5..b35a6fb 100644
--- a/.github/workflows/r-testthat.yml
+++ b/.github/workflows/r-testthat.yml
@@ -30,7 +30,7 @@ jobs:
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Execute R tests
         uses: ./.github/actions/r-testthat
         with:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 85a4179..2ebda12 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,7 +15,7 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
         with:
           fetch-depth: 0
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903
diff --git a/.github/workflows/ruby-ci.yml b/.github/workflows/ruby-ci.yml
index 82e496c..656026f 100644
--- a/.github/workflows/ruby-ci.yml
+++ b/.github/workflows/ruby-ci.yml
@@ -29,7 +29,7 @@ jobs:
       matrix:
         ruby: ${{ fromJSON(inputs.ruby-versions) }}
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - name: Setup Ruby
         uses: ruby/setup-ruby@ab177d40ee5483edb974554986f56b33477e21d0
         with:
diff --git a/.github/workflows/rust-ci.yml b/.github/workflows/rust-ci.yml
index 5280ba0..9586fda 100644
--- a/.github/workflows/rust-ci.yml
+++ b/.github/workflows/rust-ci.yml
@@ -9,7 +9,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - name: Set up Rust
         uses: dtolnay/rust-toolchain@stable
         with:
diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
index 89a89cd..4dd6bc7 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -44,7 +44,7 @@ jobs:
       PIP_AUDIT_CACHE_DIR: ~/.cache/pip-audit
       TRIVY_CACHE_DIR: ~/.cache/trivy
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - uses: actions/setup-python@cfd55ca82492758d853442341ad4d8010466803a
         with:
           python-version: '3.12'
diff --git a/.github/workflows/terraform-aws.yml b/.github/workflows/terraform-aws.yml
index c22a052..2fd74e6 100644
--- a/.github/workflows/terraform-aws.yml
+++ b/.github/workflows/terraform-aws.yml
@@ -39,7 +39,7 @@ jobs:
   terraform:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - name: Setup Terraform
         uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd
         with:
diff --git a/.github/workflows/terraform-plan-comment.yml b/.github/workflows/terraform-plan-comment.yml
index 5c199ae..513cc57 100644
--- a/.github/workflows/terraform-plan-comment.yml
+++ b/.github/workflows/terraform-plan-comment.yml
@@ -14,7 +14,7 @@ jobs:
   plan:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - name: Setup Terraform
         uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd
         with:
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 8602004..1819392 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -9,7 +9,7 @@ jobs:
   tests:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: actions/setup-node@v4
         with:
           node-version: '20'
diff --git a/.github/workflows/vercel-nextjs.yml b/.github/workflows/vercel-nextjs.yml
index aa17fd1..64d4cbd 100644
--- a/.github/workflows/vercel-nextjs.yml
+++ b/.github/workflows/vercel-nextjs.yml
@@ -44,7 +44,7 @@ jobs:
         shell: bash
     steps:
       - name: Checkout
-        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
 
       - name: Validate inputs
         run: |