diff --git a/.github/workflows/sync-master.yml b/.github/workflows/sync-master.yml
index 137468e..7c09ef7 100644
--- a/.github/workflows/sync-master.yml
+++ b/.github/workflows/sync-master.yml
@@ -7,5 +7,5 @@ jobs:
     runs-on: ubuntu-latest
     if: github.ref == 'refs/heads/main'
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
       - run: git push --force origin HEAD:refs/heads/master
diff --git a/.github/workflows/tag-major.yml b/.github/workflows/tag-major.yml
index dd9f3e0..ba551f4 100644
--- a/.github/workflows/tag-major.yml
+++ b/.github/workflows/tag-major.yml
@@ -10,7 +10,7 @@ jobs:
   bump:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
       - env:
           tag: ${{github.ref}}
         run: |
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 5e82ea6..f83d0a0 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -19,7 +19,7 @@ jobs:
     steps:
       - uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
         with: { egress-policy: audit }
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493 # v4.2.2
       - run: npm cit
         env:
           BATS_LIB_PATH: ${{ github.workspace }}/node_modules
@@ -30,7 +30,7 @@ jobs:
     steps:
       - uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
         with: { egress-policy: audit }
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493 # v4.2.2
       - uses: actions/dependency-review-action@da24556b548a50705dd671f47852072ea4c105d9 # v4.7.1
 
   ossf-scorecard:
@@ -40,7 +40,7 @@ jobs:
     steps:
       - uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
         with: { egress-policy: audit }
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493 # v4.2.2
       - uses: ossf/scorecard-action@05b42c624433fc40578a4040d5cf5e36ddca8cde # v2.4.2
         with:
           results_file: ossf-scorecard-results.sarif