diff --git a/.github/workflows/integrate.yaml b/.github/workflows/integrate.yaml
index 74f7c640..b297f9dd 100644
--- a/.github/workflows/integrate.yaml
+++ b/.github/workflows/integrate.yaml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Setup Biome
         uses: biomejs/setup-biome@1cbe33ead22c7a2fded3b52fa2893611c815c9b5 # v2
       - name: Run Biome checks
diff --git a/.github/workflows/release-prerelease.yaml b/.github/workflows/release-prerelease.yaml
index bf03f3b7..beb0ffa7 100644
--- a/.github/workflows/release-prerelease.yaml
+++ b/.github/workflows/release-prerelease.yaml
@@ -14,7 +14,7 @@ jobs:
       version: ${{ steps.generate-prerelease-version.outputs.version }}
     steps:
       - name: Checkout
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Generate prerelease version
         id: generate-prerelease-version
         run: |
diff --git a/.github/workflows/release-stable.yaml b/.github/workflows/release-stable.yaml
index 813f3659..9091fa60 100644
--- a/.github/workflows/release-stable.yaml
+++ b/.github/workflows/release-stable.yaml
@@ -18,7 +18,7 @@ jobs:
       version: ${{ steps.next-version.outputs.version }}
     steps:
       - name: Checkout
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           # Fetch the whole history so we can determine the next version number
           # based on the commit history.
diff --git a/.github/workflows/~package-prerelease.yaml b/.github/workflows/~package-prerelease.yaml
index aef31fbc..016e7acc 100644
--- a/.github/workflows/~package-prerelease.yaml
+++ b/.github/workflows/~package-prerelease.yaml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Setup PNPM
         uses: pnpm/action-setup@v4
         with:
diff --git a/.github/workflows/~package-stable.yaml b/.github/workflows/~package-stable.yaml
index 99c07af8..3121e0e7 100644
--- a/.github/workflows/~package-stable.yaml
+++ b/.github/workflows/~package-stable.yaml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           # We fetch the latest commit on the main branch to ensure that our
           # package.json version contains the patched version number from the
diff --git a/.github/workflows/~publish-to-github-releases.yaml b/.github/workflows/~publish-to-github-releases.yaml
index 4d46a915..f264cf7e 100644
--- a/.github/workflows/~publish-to-github-releases.yaml
+++ b/.github/workflows/~publish-to-github-releases.yaml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           # Fetch the whole history so we can determine the next version number
           # based on the commit history.
diff --git a/.github/workflows/~publish-to-ovsx-registry.yaml b/.github/workflows/~publish-to-ovsx-registry.yaml
index 761de670..8cedf5a9 100644
--- a/.github/workflows/~publish-to-ovsx-registry.yaml
+++ b/.github/workflows/~publish-to-ovsx-registry.yaml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Retrieve packaged VSIX
         uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4
         with:
diff --git a/.github/workflows/~publish-to-vs-marketplace.yaml b/.github/workflows/~publish-to-vs-marketplace.yaml
index 1865431b..cc50a348 100644
--- a/.github/workflows/~publish-to-vs-marketplace.yaml
+++ b/.github/workflows/~publish-to-vs-marketplace.yaml
@@ -14,7 +14,7 @@ jobs:
     environment: vscode
     steps:
       - name: Checkout
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Retrieve packaged VSIX
         uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4
         with: