diff --git a/.github/workflows/cargo-build.yml b/.github/workflows/cargo-build.yml
index ebf2650..880758a 100644
--- a/.github/workflows/cargo-build.yml
+++ b/.github/workflows/cargo-build.yml
@@ -31,7 +31,7 @@ jobs:
       # Remove this when it no longer FTBFS on `ring` in CI.
       CARGO_PROFILE_TEST_BUILD_OVERRIDE_DEBUG: true
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6.0.2
       - uses: actions-rust-lang/setup-rust-toolchain@v1.16.1
       - name: Install dependencies
         run: |
diff --git a/.github/workflows/cargo-clippy.yml b/.github/workflows/cargo-clippy.yml
index ff56e0e..54e3211 100644
--- a/.github/workflows/cargo-clippy.yml
+++ b/.github/workflows/cargo-clippy.yml
@@ -30,7 +30,7 @@ jobs:
       # Remove this when it no longer FTBFS on `ring` in CI.
       CARGO_PROFILE_TEST_BUILD_OVERRIDE_DEBUG: true
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6.0.2
       - uses: actions-rust-lang/setup-rust-toolchain@v1.16.1
         with:
           components: clippy
diff --git a/.github/workflows/cargo-fmt.yml b/.github/workflows/cargo-fmt.yml
index efdcbfc..53ea8cb 100644
--- a/.github/workflows/cargo-fmt.yml
+++ b/.github/workflows/cargo-fmt.yml
@@ -31,7 +31,7 @@ jobs:
       # Remove this when it no longer FTBFS on `ring` in CI.
       CARGO_PROFILE_TEST_BUILD_OVERRIDE_DEBUG: true
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6.0.2
       - uses: actions-rust-lang/setup-rust-toolchain@v1.16.1
         with:
           components: rustfmt
diff --git a/.github/workflows/cargo-test.yml b/.github/workflows/cargo-test.yml
index aa8e638..646521a 100644
--- a/.github/workflows/cargo-test.yml
+++ b/.github/workflows/cargo-test.yml
@@ -28,7 +28,7 @@ jobs:
       # Remove this when it no longer FTBFS on `ring` in CI.
       CARGO_PROFILE_TEST_BUILD_OVERRIDE_DEBUG: true
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6.0.2
       - uses: actions-rust-lang/setup-rust-toolchain@v1.16.1
       - uses: taiki-e/install-action@cargo-llvm-cov
       - uses: taiki-e/install-action@nextest
diff --git a/.github/workflows/make-release.yml b/.github/workflows/make-release.yml
index f2769e2..adc8533 100644
--- a/.github/workflows/make-release.yml
+++ b/.github/workflows/make-release.yml
@@ -13,7 +13,7 @@ jobs:
     name: make release
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6.0.2
       - name: 'Authenticate to Google Cloud'
         uses: 'google-github-actions/auth@v3.0.0'
         with:
@@ -91,7 +91,7 @@ jobs:
     needs: [makerelease]
     name: createrelease
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6.0.2
       - name: Install latest nightly
         uses: dtolnay/rust-toolchain@stable
       - uses: actions/download-artifact@v8
diff --git a/.github/workflows/update-spec-for-repos.yml b/.github/workflows/update-spec-for-repos.yml
index 6af7586..6b422c1 100644
--- a/.github/workflows/update-spec-for-repos.yml
+++ b/.github/workflows/update-spec-for-repos.yml
@@ -26,9 +26,9 @@ jobs:
           app-id: ${{ secrets.GH_ORG_APP_ID }}
           private-key: ${{ secrets.GH_ORG_APP_PRIVATE_KEY }}
           owner: ${{ github.repository_owner }}
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6.0.2
       # Checkout the repo since we will want to update the file there.
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6.0.2
         with:
           repository: 'kittycad/${{ matrix.repo }}'
           path: ${{ matrix.repo }}
diff --git a/.github/workflows/validate-openapi-spec.yml b/.github/workflows/validate-openapi-spec.yml
index 6284cf1..b2afd65 100644
--- a/.github/workflows/validate-openapi-spec.yml
+++ b/.github/workflows/validate-openapi-spec.yml
@@ -16,7 +16,7 @@ jobs:
   format:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6.0.2
       - uses: actions/setup-node@v6.4.0
         with:
           node-version: '18'