diff --git a/.github/workflows/codecov.yml b/.github/workflows/codecov.yml
index 1fa689a007..adee863282 100644
--- a/.github/workflows/codecov.yml
+++ b/.github/workflows/codecov.yml
@@ -16,7 +16,7 @@ jobs:
   codecov:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
       - uses: teatimeguest/setup-texlive-action@v3.2.1
         with:
           update-all-packages: true
diff --git a/.github/workflows/daily.yml b/.github/workflows/daily.yml
index 133a927a02..20d1e638f7 100644
--- a/.github/workflows/daily.yml
+++ b/.github/workflows/daily.yml
@@ -8,7 +8,7 @@ jobs:
   build:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
       - uses: teatimeguest/setup-texlive-action@v3.2.1
         with:
           update-all-packages: true
diff --git a/.github/workflows/ebnf.yml b/.github/workflows/ebnf.yml
index 0412d4b0a7..34b9fac415 100644
--- a/.github/workflows/ebnf.yml
+++ b/.github/workflows/ebnf.yml
@@ -13,7 +13,7 @@ jobs:
     env:
       CONVERT_PATH: /tmp/antlr4-to-bnf-converter
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
       - run: |
           sudo apt-get update
           sudo apt-get -y install ghostscript imagemagick texlive-extra-utils pdf2svg inkscape
diff --git a/.github/workflows/gpt-code-review.yml b/.github/workflows/gpt-code-review.yml
index e032029a32..e19e1effff 100644
--- a/.github/workflows/gpt-code-review.yml
+++ b/.github/workflows/gpt-code-review.yml
@@ -10,7 +10,7 @@ jobs:
   build:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
         with:
           fetch-depth: 0
       - uses: actions/setup-node@v4
diff --git a/.github/workflows/loc-badge.yml b/.github/workflows/loc-badge.yml
index 81cf830676..c2b68fdbe9 100644
--- a/.github/workflows/loc-badge.yml
+++ b/.github/workflows/loc-badge.yml
@@ -11,7 +11,7 @@ jobs:
   loc-badge:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
       - uses: shadowmoose/GHA-LoC-Badge@1.0.0
         with:
           debug: true
diff --git a/.github/workflows/mvn.yml b/.github/workflows/mvn.yml
index 60d2b3a65f..b4e563507e 100644
--- a/.github/workflows/mvn.yml
+++ b/.github/workflows/mvn.yml
@@ -23,7 +23,7 @@ jobs:
     env:
       CONVERT_PATH: /tmp/antlr4-to-bnf-converter
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
       - uses: actions/setup-java@v4
         with:
           distribution: 'temurin'
diff --git a/.github/workflows/simian.yml b/.github/workflows/simian.yml
index 0621cb305e..0aaee3bc75 100644
--- a/.github/workflows/simian.yml
+++ b/.github/workflows/simian.yml
@@ -16,7 +16,7 @@ jobs:
   simian:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
       - uses: actions/setup-java@v4
         with:
           distribution: 'temurin'
diff --git a/.github/workflows/sonar.yml b/.github/workflows/sonar.yml
index d81820084e..3f1747d484 100644
--- a/.github/workflows/sonar.yml
+++ b/.github/workflows/sonar.yml
@@ -11,7 +11,7 @@ jobs:
   sonar:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
         with:
           fetch-depth: 0
       - uses: teatimeguest/setup-texlive-action@v3.2.1
diff --git a/.github/workflows/up.yml b/.github/workflows/up.yml
index 18a6f4835c..fd7ec0b84f 100644
--- a/.github/workflows/up.yml
+++ b/.github/workflows/up.yml
@@ -13,7 +13,7 @@ jobs:
   up:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
       - run: |-
           git fetch --tags --force && \
           latest=$(git tag --sort=creatordate | tail -1) && \
diff --git a/.github/workflows/xcop.yml b/.github/workflows/xcop.yml
index 6184a8319d..225b4377be 100644
--- a/.github/workflows/xcop.yml
+++ b/.github/workflows/xcop.yml
@@ -14,7 +14,7 @@ jobs:
   xcop:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
       - uses: g4s8/xcop-action@v1.3
         with:
           files: |
diff --git a/.github/workflows/year.yml b/.github/workflows/year.yml
index 2cba516a43..86b3f80047 100644
--- a/.github/workflows/year.yml
+++ b/.github/workflows/year.yml
@@ -10,7 +10,7 @@ jobs:
   license:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
         with:
           fetch-depth: 0
       - uses: FantasticFiasco/action-update-license-year@v3