diff --git a/.github/workflows/balancer.yaml b/.github/workflows/balancer.yaml
index c4a3e3fa3..f30699db1 100644
--- a/.github/workflows/balancer.yaml
+++ b/.github/workflows/balancer.yaml
@@ -17,7 +17,7 @@ jobs:
   push:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2
+    - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
     - name: Build production image
       run: make build_balancer
     - name: "Docker login"
diff --git a/.github/workflows/javascript.yaml b/.github/workflows/javascript.yaml
index 37104fd84..a139d638c 100644
--- a/.github/workflows/javascript.yaml
+++ b/.github/workflows/javascript.yaml
@@ -17,7 +17,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
       - name: Set up Node 14.x
         uses: actions/setup-node@1f8c6b94b26d0feae1e387ca63ccbdc44d27b561 # renovate: tag=v2
         with:
@@ -45,7 +45,7 @@ jobs:
     needs:
       - test
     steps:
-      - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
       - name: Build production image
         run: make build_frontend
       - name: "Docker login"
diff --git a/.github/workflows/lint_yaml.yml b/.github/workflows/lint_yaml.yml
index 433823156..f51d65fae 100644
--- a/.github/workflows/lint_yaml.yml
+++ b/.github/workflows/lint_yaml.yml
@@ -12,7 +12,7 @@ jobs:
   lint_speccy:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2
+    - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
     - name: Lint with Speccy
       run: |
         find $PWD -name 'swagger.yaml' | while read FILE; do
@@ -22,7 +22,7 @@ jobs:
   lint_openapi:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2
+    - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
     - name: Lint with openapi-spec-validator
       run: |
         find $PWD -name 'swagger.yaml' | while read FILE; do
diff --git a/.github/workflows/python.yaml b/.github/workflows/python.yaml
index 8187434a7..71ea73ec7 100644
--- a/.github/workflows/python.yaml
+++ b/.github/workflows/python.yaml
@@ -20,7 +20,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2
+    - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
     - name: Pyupgrade
       run: make pyupgrade
     - name: Lint
@@ -64,7 +64,7 @@ jobs:
     needs:
       - test
     steps:
-    - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2
+    - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
     - name: Build production image
       run: make build_backend
     - name: "Docker login"