diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 83d98a50..8b04875f 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: ⤵️ Check out code from GitHub
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: 🏗 Initialize CodeQL
         uses: github/codeql-action/init@v3
       - name: 🚀 Perform CodeQL Analysis
diff --git a/.github/workflows/labels.yml b/.github/workflows/labels.yml
index 03d2bd02..6e5ccc58 100644
--- a/.github/workflows/labels.yml
+++ b/.github/workflows/labels.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: ⤵️ Check out code from GitHub
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: 🚀 Run Label Syncer
         uses: micnncim/action-label-syncer@v1.3.0
         env:
diff --git a/.github/workflows/typo-check.yml b/.github/workflows/typo-check.yml
index 84e6eca3..7f188d85 100644
--- a/.github/workflows/typo-check.yml
+++ b/.github/workflows/typo-check.yml
@@ -13,7 +13,7 @@ jobs:
         run: curl -LsSf https://github.com/crate-ci/typos/releases/download/$TYPOS_VERSION/typos-$TYPOS_VERSION-x86_64-unknown-linux-musl.tar.gz | tar zxf - -C ${CARGO_HOME:-~/.cargo}/bin
 
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
diff --git a/.nx/version-plans/version-plan-1780499191994.md b/.nx/version-plans/version-plan-1780499191994.md
new file mode 100644
index 00000000..e7e8efde
--- /dev/null
+++ b/.nx/version-plans/version-plan-1780499191994.md
@@ -0,0 +1,5 @@
+---
+__default__: patch
+---
+
+chore(deps): update actions/checkout action to v6