diff --git a/.github/workflows/dotnet-code-metrics.yml b/.github/workflows/dotnet-code-metrics.yml
index 6f1b2d955d6..7b27bc9798a 100644
--- a/.github/workflows/dotnet-code-metrics.yml
+++ b/.github/workflows/dotnet-code-metrics.yml
@@ -22,7 +22,7 @@ jobs:
         pull-requests: write
 
     steps:
-    - uses: actions/checkout@v4.1.7
+    - uses: actions/checkout@v4.2.0
 
     - name: 'Print manual run reason'
       if: ${{ github.event_name == 'workflow_dispatch' }}
diff --git a/.github/workflows/markdownlint.yml b/.github/workflows/markdownlint.yml
index 763b68bf689..2c8888535fd 100644
--- a/.github/workflows/markdownlint.yml
+++ b/.github/workflows/markdownlint.yml
@@ -14,9 +14,9 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 #@v2
+    - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 #@v2
     - name: Use Node.js
-      uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b #@v1
+      uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 #@v1
       with:
         node-version: 12.x
     - name: Run Markdownlint
diff --git a/.github/workflows/publish-mono-samples.yml b/.github/workflows/publish-mono-samples.yml
index efbb9f469e9..611b0a53fcf 100644
--- a/.github/workflows/publish-mono-samples.yml
+++ b/.github/workflows/publish-mono-samples.yml
@@ -23,7 +23,7 @@ jobs:
   build-mono:
     runs-on: macos-latest
     steps:
-    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 #@v2
+    - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 #@v2
     - name: Setup .NET SDK 6
       if: ${{ env.DOTNET_DO_INSTALL == 'true' }}
       run: |
diff --git a/.github/workflows/snippets5000.yml b/.github/workflows/snippets5000.yml
index f218af78bc9..a97d29e3f2b 100644
--- a/.github/workflows/snippets5000.yml
+++ b/.github/workflows/snippets5000.yml
@@ -32,7 +32,7 @@ jobs:
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
     # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 #@v4.1.7
+    - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 #@v4.2.0
 
     # Get the latest preview SDK (or sdk not installed by the runner)
     - name: Setup .NET SDK