diff --git a/.github/workflows/continuous-integration-javascript.yml b/.github/workflows/continuous-integration-javascript.yml
index daf6dfa083..a3a7accf15 100644
--- a/.github/workflows/continuous-integration-javascript.yml
+++ b/.github/workflows/continuous-integration-javascript.yml
@@ -29,7 +29,7 @@ jobs:
 
     steps:
       # https://github.com/actions/checkout
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
         with:
           # Number of commits to fetch. 0 indicates all history for all branches and tags.
           fetch-depth: 0
diff --git a/.github/workflows/continuous-integration-rust.yml b/.github/workflows/continuous-integration-rust.yml
index d4bc5429cf..9598bbe208 100644
--- a/.github/workflows/continuous-integration-rust.yml
+++ b/.github/workflows/continuous-integration-rust.yml
@@ -22,7 +22,7 @@ jobs:
 
     steps:
       # https://github.com/actions/checkout
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
 
       # https://github.com/dorny/paths-filter
       - uses: dorny/paths-filter@v3.0.2
diff --git a/.github/workflows/dockerfile-builder.yml b/.github/workflows/dockerfile-builder.yml
index 11725f2aa0..2bbd7b5a85 100644
--- a/.github/workflows/dockerfile-builder.yml
+++ b/.github/workflows/dockerfile-builder.yml
@@ -52,7 +52,7 @@ jobs:
 
     steps:
       # https://github.com/actions/checkout
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
         with:
           # Number of commits to fetch. 0 indicates all history for all branches and tags.
           fetch-depth: 0
diff --git a/.github/workflows/npm-publisher.yml b/.github/workflows/npm-publisher.yml
index dacbf2c0a3..58e7597942 100644
--- a/.github/workflows/npm-publisher.yml
+++ b/.github/workflows/npm-publisher.yml
@@ -15,7 +15,7 @@ jobs:
 
     steps:
       # https://github.com/actions/checkout
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
         with:
           # Number of commits to fetch. 0 indicates all history for all branches and tags.
           fetch-depth: 0
diff --git a/.github/workflows/playwright.yml b/.github/workflows/playwright.yml
index 039fef38cf..09c0ed50c8 100644
--- a/.github/workflows/playwright.yml
+++ b/.github/workflows/playwright.yml
@@ -60,7 +60,7 @@ jobs:
 
     steps:
       # https://github.com/actions/checkout
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
 
       # https://github.com/dorny/paths-filter
       - uses: dorny/paths-filter@v3.0.2
diff --git a/.github/workflows/shellcheck.yml b/.github/workflows/shellcheck.yml
index 99dabd7739..f914f5f21b 100644
--- a/.github/workflows/shellcheck.yml
+++ b/.github/workflows/shellcheck.yml
@@ -16,7 +16,7 @@ jobs:
 
     steps:
       # https://github.com/actions/checkout
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
 
       - name: Run ShellCheck
         # TODO: expand as needed (./**/*.sh)
diff --git a/.github/workflows/shipit.yml b/.github/workflows/shipit.yml
index 1670b4c77e..31ad474a99 100644
--- a/.github/workflows/shipit.yml
+++ b/.github/workflows/shipit.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
         with:
           # Number of commits to fetch. 0 indicates all history for all branches and tags (Shipit requires it).
           fetch-depth: 0
diff --git a/.github/workflows/weekly-browserslist-update.yml b/.github/workflows/weekly-browserslist-update.yml
index e6ea6522af..dcd8c4be87 100644
--- a/.github/workflows/weekly-browserslist-update.yml
+++ b/.github/workflows/weekly-browserslist-update.yml
@@ -12,7 +12,7 @@ jobs:
 
     steps:
       # https://github.com/actions/checkout
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
 
       - run: yarn up browserslist --recursive
       - run: yarn dedupe
diff --git a/.github/workflows/weekly-rust-cargo-update.yml b/.github/workflows/weekly-rust-cargo-update.yml
index ed71fe519c..e158c1d24d 100644
--- a/.github/workflows/weekly-rust-cargo-update.yml
+++ b/.github/workflows/weekly-rust-cargo-update.yml
@@ -18,7 +18,7 @@ jobs:
 
     steps:
       # https://github.com/actions/checkout
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
 
       # https://github.com/dtolnay/rust-toolchain
       - uses: dtolnay/rust-toolchain@stable