diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index fc066cd0af..14256832e4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -7,7 +7,7 @@ jobs:
     name: preliminary sanity checks
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4
         with:
           fetch-depth: 0 #needed by spotless
       - name: Download JDK 9
@@ -72,7 +72,7 @@ jobs:
     name: ${{ matrix.test-type.type }} tests
     needs: preliminary
     steps:
-    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4
+    - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4
     - name: Download Java 9
       if: contains('main 3.6.x', github.base_ref)
       run: ${GITHUB_WORKSPACE}/.github/setup.sh
diff --git a/.github/workflows/full.yml b/.github/workflows/full.yml
index 3790d9b437..48dfb3ed42 100644
--- a/.github/workflows/full.yml
+++ b/.github/workflows/full.yml
@@ -22,7 +22,7 @@ jobs:
     name: Test on ${{ matrix.branch }} - ${{ matrix.test-type.type }} tests
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4
         with:
           ref: ${{ matrix.branch }}
       - name: Download Java 9
diff --git a/.github/workflows/gradle-wrapper-validation.yml b/.github/workflows/gradle-wrapper-validation.yml
index 5f11a7b9a0..b658a2f239 100644
--- a/.github/workflows/gradle-wrapper-validation.yml
+++ b/.github/workflows/gradle-wrapper-validation.yml
@@ -6,5 +6,5 @@ jobs:
     name: "validation"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4
       - uses: gradle/actions/wrapper-validation@d156388eb19639ec20ade50009f3d199ce1e2808
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 59004d1aed..21584cd010 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -29,7 +29,7 @@ jobs:
       versionType: ${{ steps.version.outputs.versionType }}
       fullVersion: ${{ steps.version.outputs.fullVersion }}
     steps:
-    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4
+    - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4
     - name: Download JDK 9
       if: contains('main 3.6.x', github.base_ref)
       run: ${GITHUB_WORKSPACE}/.github/setup.sh
@@ -71,7 +71,7 @@ jobs:
     if: needs.prepare.outputs.versionType == 'SNAPSHOT'
     environment: snapshots
     steps:
-    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4
+    - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4
     - name: Download JDK 9
       if: contains('main 3.6.x', github.base_ref)
       run: ${GITHUB_WORKSPACE}/.github/setup.sh
@@ -109,7 +109,7 @@ jobs:
     if: needs.prepare.outputs.versionType == 'MILESTONE'
     environment: releases
     steps:
-    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4
+    - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4
     - name: Download JDK 9
       if: contains('main 3.6.x', github.base_ref)
       run: ${GITHUB_WORKSPACE}/.github/setup.sh
@@ -149,7 +149,7 @@ jobs:
     if: needs.prepare.outputs.versionType == 'RELEASE'
     environment: releases
     steps:
-    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4
+    - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4
     - name: Download JDK 9
       if: contains('main 3.6.x', github.base_ref)
       run: ${GITHUB_WORKSPACE}/.github/setup.sh
@@ -190,7 +190,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4
       - name: tag
         run: |
           git config --local user.name 'reactorbot'
@@ -205,7 +205,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4
       - name: tag
         run: |
           git config --local user.name 'reactorbot'
diff --git a/.github/workflows/snapshots.yml b/.github/workflows/snapshots.yml
index cf8f47b1f9..df92c67a61 100644
--- a/.github/workflows/snapshots.yml
+++ b/.github/workflows/snapshots.yml
@@ -20,7 +20,7 @@ jobs:
     name: Test on ${{ matrix.branch }} - ${{ matrix.test-type.type }} tests
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4
         with:
           ref: ${{ matrix.branch }}
       - name: Download Java 9