diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 84801a6..3f530a8 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -20,7 +20,7 @@ jobs:
       tag: ${{ steps.envvars.outputs.tag }}
     steps:
       - name: checkout
-        uses: actions/checkout@v5.0.0
+        uses: actions/checkout@v5.0.1
 
       - name: Prepare env
         id: envvars
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 33e0bf0..be94b67 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -15,7 +15,7 @@ jobs:
     container: condaforge/mambaforge:latest
 
     steps:
-    - uses: actions/checkout@v5.0.0
+    - uses: actions/checkout@v5.0.1
 
     - name: Run CI
       # Ensure the step runs under bash so `pipefail` is supported in the shell flags