diff --git a/.github/workflows/codecov.yml b/.github/workflows/codecov.yml
index 9e5b776315..b8e76c5039 100644
--- a/.github/workflows/codecov.yml
+++ b/.github/workflows/codecov.yml
@@ -11,7 +11,7 @@ jobs:
   codecov:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
       - uses: teatimeguest/setup-texlive-action@v2.6.2
         with:
           update-all-packages: true
diff --git a/.github/workflows/daily.yml b/.github/workflows/daily.yml
index b198fee9c9..33cdbd6329 100644
--- a/.github/workflows/daily.yml
+++ b/.github/workflows/daily.yml
@@ -7,7 +7,7 @@ jobs:
   build:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
       - uses: teatimeguest/setup-texlive-action@v2.6.2
         with:
           update-all-packages: true
diff --git a/.github/workflows/ebnf.yml b/.github/workflows/ebnf.yml
index 43b50348ff..4de73114ba 100644
--- a/.github/workflows/ebnf.yml
+++ b/.github/workflows/ebnf.yml
@@ -14,7 +14,7 @@ jobs:
     env:
       CONVERT_PATH: /tmp/antlr4-to-bnf-converter
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
       - run: |
           sudo apt-get update
           sudo apt-get -y install ghostscript imagemagick texlive-extra-utils pdf2svg
diff --git a/.github/workflows/gpt-code-review.yml b/.github/workflows/gpt-code-review.yml
index b0aba9c100..2b45933b50 100644
--- a/.github/workflows/gpt-code-review.yml
+++ b/.github/workflows/gpt-code-review.yml
@@ -9,7 +9,7 @@ jobs:
   build:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 0
       - uses: actions/setup-node@v3
diff --git a/.github/workflows/latexmk.yml b/.github/workflows/latexmk.yml
index 552374ccc7..1b0d0a56b6 100644
--- a/.github/workflows/latexmk.yml
+++ b/.github/workflows/latexmk.yml
@@ -13,7 +13,7 @@ jobs:
   latexmk:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
       - uses: yegor256/latexmk-action@0.8.0
         with:
           path: paper
diff --git a/.github/workflows/mvn.yml b/.github/workflows/mvn.yml
index b3d47abe63..3b3e93e1c2 100644
--- a/.github/workflows/mvn.yml
+++ b/.github/workflows/mvn.yml
@@ -23,7 +23,7 @@ jobs:
     env:
       CONVERT_PATH: /tmp/antlr4-to-bnf-converter
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
       - uses: actions/setup-java@v3
         with:
           distribution: 'temurin'
diff --git a/.github/workflows/pdd.yml b/.github/workflows/pdd.yml
index 2801c745e6..8267b8b8a2 100644
--- a/.github/workflows/pdd.yml
+++ b/.github/workflows/pdd.yml
@@ -14,5 +14,5 @@ jobs:
   pdd:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
       - uses: g4s8/pdd-action@master
diff --git a/.github/workflows/sonar.yml b/.github/workflows/sonar.yml
index 12bf76f75a..1db041beef 100644
--- a/.github/workflows/sonar.yml
+++ b/.github/workflows/sonar.yml
@@ -11,7 +11,7 @@ jobs:
   sonar:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 0
       - uses: teatimeguest/setup-texlive-action@v2.6.2
diff --git a/.github/workflows/up.yml b/.github/workflows/up.yml
index f0bc73ff41..e1cd8cf851 100644
--- a/.github/workflows/up.yml
+++ b/.github/workflows/up.yml
@@ -13,7 +13,7 @@ jobs:
   up:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
       - run: |-
           git fetch --tags --force && \
           latest=$(git tag --sort=creatordate | tail -1) && \
diff --git a/.github/workflows/xcop.yml b/.github/workflows/xcop.yml
index 75d01d7382..d6764f5753 100644
--- a/.github/workflows/xcop.yml
+++ b/.github/workflows/xcop.yml
@@ -14,7 +14,7 @@ jobs:
   xcop:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
       - uses: g4s8/xcop-action@v1.3
         with:
           files: |
diff --git a/.github/workflows/year.yml b/.github/workflows/year.yml
index 54f1a5aa15..4dfb2725f1 100644
--- a/.github/workflows/year.yml
+++ b/.github/workflows/year.yml
@@ -9,7 +9,7 @@ jobs:
   license:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 0
       - uses: FantasticFiasco/action-update-license-year@v3