diff --git a/.github/workflows/checkVersions.yml b/.github/workflows/checkVersions.yml
index 1e5b373e45e..22b6954f18c 100644
--- a/.github/workflows/checkVersions.yml
+++ b/.github/workflows/checkVersions.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
 
-    - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       with:
         fetch-depth: 0 # required for jgit timestamp provider to work
 
diff --git a/.github/workflows/codeQLworkflow.yml b/.github/workflows/codeQLworkflow.yml
index 5dc4711ad43..5752d9761f8 100644
--- a/.github/workflows/codeQLworkflow.yml
+++ b/.github/workflows/codeQLworkflow.yml
@@ -47,7 +47,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       with:
        fetch-depth: 0 # required for jgit timestamp provider to work
        submodules: ${{ inputs.submodules }}
diff --git a/.github/workflows/mavenBuild.yml b/.github/workflows/mavenBuild.yml
index ec9091a7bdb..591292bd8e1 100644
--- a/.github/workflows/mavenBuild.yml
+++ b/.github/workflows/mavenBuild.yml
@@ -45,7 +45,7 @@ jobs:
     name: Verify ${{ matrix.config.name }}
     steps:
     - name: Checkout
-      uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       with:
        fetch-depth: 0 # required for jgit timestamp provider to work
        submodules: ${{ inputs.submodules }}
diff --git a/.github/workflows/prepareRelease.yml b/.github/workflows/prepareRelease.yml
index f70ad187f3a..7b02881c838 100644
--- a/.github/workflows/prepareRelease.yml
+++ b/.github/workflows/prepareRelease.yml
@@ -22,7 +22,7 @@ jobs:
       run: |
         name=$(echo ${{ github.event.milestone.due_on }} | cut -d- -f-2)
         echo "name=$name" >> $GITHUB_OUTPUT
-    - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       with:
         ref: master
     - name: Set up JDK
diff --git a/.github/workflows/publishVersionCheckResults.yml b/.github/workflows/publishVersionCheckResults.yml
index b15c0ae66c7..cd92bcc3e1d 100644
--- a/.github/workflows/publishVersionCheckResults.yml
+++ b/.github/workflows/publishVersionCheckResults.yml
@@ -36,7 +36,7 @@ jobs:
           let artifact = allArtifacts.data.artifacts.find(artifact => artifact.name == 'versions-git-patch')
           return artifact?.id
 
-    - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       if: steps.search-patch.outputs.result
       with:
         ref: '${{ github.event.workflow_run.head_sha }}'
diff --git a/.github/workflows/updateRelease.yml b/.github/workflows/updateRelease.yml
index a9a10aa698a..5b3621df0be 100644
--- a/.github/workflows/updateRelease.yml
+++ b/.github/workflows/updateRelease.yml
@@ -7,7 +7,7 @@ jobs:
     runs-on: ubuntu-latest
     if: contains(github.event.milestone.description, 'Release') 
     steps:
-    - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       with:
         fetch-depth: 0
         ref: master
diff --git a/.github/workflows/updateTarget.yml b/.github/workflows/updateTarget.yml
index 88828353ef2..d841d302b1b 100644
--- a/.github/workflows/updateTarget.yml
+++ b/.github/workflows/updateTarget.yml
@@ -17,7 +17,7 @@ jobs:
   update:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       with:
         fetch-depth: 0
         ref: master