diff --git a/.github/workflows/announce-a-release.yml b/.github/workflows/announce-a-release.yml
index 56ff957..73d1874 100644
--- a/.github/workflows/announce-a-release.yml
+++ b/.github/workflows/announce-a-release.yml
@@ -12,7 +12,7 @@ jobs:
     name: Announce a release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4.1.1
       - name: Announce
         uses: docker://ponylang/release-bot-action:0.5.0
         with:
diff --git a/.github/workflows/lint-action-workflows.yml b/.github/workflows/lint-action-workflows.yml
index 0bab4d8..e651731 100644
--- a/.github/workflows/lint-action-workflows.yml
+++ b/.github/workflows/lint-action-workflows.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4.1.1
       - name: Check workflow files
         uses: docker://ghcr.io/ponylang/shared-docker-ci-actionlint:20230822
         with:
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 58b4797..be8060d 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -11,7 +11,7 @@ jobs:
     name: Lint bash, docker, markdown, and yaml
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4.1.1
       - name: Lint codebase
         uses: docker://github/super-linter:v3.8.3
         env:
@@ -28,6 +28,6 @@ jobs:
     container:
       image: ghcr.io/ponylang/changelog-tool:release
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4.1.1
       - name: Verify CHANGELOG
         run: changelog-tool verify
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1c9dcd8..bdf5f0a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,7 +12,7 @@ jobs:
     name: Trigger release announcement
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4.1.1
       - name: Trigger
         uses: docker://ponylang/release-bot-action:0.5.0
         with:
diff --git a/.github/workflows/start-a-release.yml b/.github/workflows/start-a-release.yml
index 8391007..4e81660 100644
--- a/.github/workflows/start-a-release.yml
+++ b/.github/workflows/start-a-release.yml
@@ -14,7 +14,7 @@ jobs:
     container:
       image: ghcr.io/ponylang/shared-docker-ci-emacs-mode-release:20231127
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4.1.1
       - name: Start release process
         run: bash .ci-scripts/release/update-melpa-version.bash
         env:
@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: [update-melpa-version]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4.1.1
       - name: Start
         uses: docker://ponylang/release-bot-action:0.5.0
         with: