diff --git a/.github/workflows/build-and-dockerize.yaml b/.github/workflows/build-and-dockerize.yaml
index 386da72cd3..b9bbe9edd7 100644
--- a/.github/workflows/build-and-dockerize.yaml
+++ b/.github/workflows/build-and-dockerize.yaml
@@ -60,7 +60,7 @@ jobs:
       pull-requests: write
     steps:
       - name: checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
         with:
           fetch-depth: 2
 
@@ -239,7 +239,7 @@ jobs:
     name: publish multiarch manifest
     steps:
       - name: checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
         with:
           fetch-depth: 2
 
diff --git a/.github/workflows/changeset-validation.yaml b/.github/workflows/changeset-validation.yaml
index 1d0be921b2..bd9867d1cb 100644
--- a/.github/workflows/changeset-validation.yaml
+++ b/.github/workflows/changeset-validation.yaml
@@ -7,7 +7,7 @@ jobs:
 
     steps:
       - name: checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
 
       - name: setup environment
         uses: ./.github/actions/setup
diff --git a/.github/workflows/changeset-version.yaml b/.github/workflows/changeset-version.yaml
index 2ba727917e..2c07612862 100644
--- a/.github/workflows/changeset-version.yaml
+++ b/.github/workflows/changeset-version.yaml
@@ -13,7 +13,7 @@ jobs:
 
     steps:
       - name: checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
         with:
           # `changeset version` walks git history to find the commit that added
           # each changeset. On a shallow clone it deepens via `git fetch --deepen`
diff --git a/.github/workflows/db-types-diff.yaml b/.github/workflows/db-types-diff.yaml
index 67282b43a3..4282d5ab9c 100644
--- a/.github/workflows/db-types-diff.yaml
+++ b/.github/workflows/db-types-diff.yaml
@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
 
       - name: setup environment
         uses: ./.github/actions/setup
diff --git a/.github/workflows/dockerize-cli.yaml b/.github/workflows/dockerize-cli.yaml
index f1be31585b..b57626a1e5 100644
--- a/.github/workflows/dockerize-cli.yaml
+++ b/.github/workflows/dockerize-cli.yaml
@@ -24,7 +24,7 @@ jobs:
       pull-requests: write
     steps:
       - name: checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
         with:
           fetch-depth: 2
       - name: configure Docker Node.js image tag
diff --git a/.github/workflows/graphql-schema-check.yaml b/.github/workflows/graphql-schema-check.yaml
index 4ec78f68b7..a028555d6c 100644
--- a/.github/workflows/graphql-schema-check.yaml
+++ b/.github/workflows/graphql-schema-check.yaml
@@ -21,7 +21,7 @@ jobs:
     if: needs.search-token.outputs.hive_token_present == 'true'
     steps:
       - name: checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
         with:
           fetch-depth: 2
 
diff --git a/.github/workflows/graphql-schema-publish.yaml b/.github/workflows/graphql-schema-publish.yaml
index 298dda83d8..2854960574 100644
--- a/.github/workflows/graphql-schema-publish.yaml
+++ b/.github/workflows/graphql-schema-publish.yaml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
         with:
           fetch-depth: 2
 
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 1ca892ac60..bc2ce64370 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -7,7 +7,7 @@ jobs:
 
     steps:
       - name: checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
         with:
           fetch-depth: 2
 
diff --git a/.github/workflows/open-source-summary.yaml b/.github/workflows/open-source-summary.yaml
index 3040b06bd3..150554a049 100644
--- a/.github/workflows/open-source-summary.yaml
+++ b/.github/workflows/open-source-summary.yaml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
         with:
           fetch-depth: 1
 
diff --git a/.github/workflows/pr-closed.yaml b/.github/workflows/pr-closed.yaml
index 4fdad9c6c4..c9e2b8d0c8 100644
--- a/.github/workflows/pr-closed.yaml
+++ b/.github/workflows/pr-closed.yaml
@@ -16,7 +16,7 @@ jobs:
 
     steps:
       - name: Check out code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
 
       - name: Cleanup
         run: |
diff --git a/.github/workflows/prettier.yaml b/.github/workflows/prettier.yaml
index ed718881f4..99e6481040 100644
--- a/.github/workflows/prettier.yaml
+++ b/.github/workflows/prettier.yaml
@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
         with:
           fetch-depth: 2
           ref: ${{ github.event.inputs.branch }}
diff --git a/.github/workflows/release-alpha.yaml b/.github/workflows/release-alpha.yaml
index 23f4e4a74a..0f47e75c33 100644
--- a/.github/workflows/release-alpha.yaml
+++ b/.github/workflows/release-alpha.yaml
@@ -8,7 +8,7 @@ jobs:
 
     steps:
       - name: checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
         with:
           fetch-depth: 2
 
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 1d21fcb8e9..0493c116eb 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -78,7 +78,7 @@ jobs:
 
     steps:
       - name: checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
         with:
           fetch-depth: 2
           token: ${{ secrets.BOT_GITHUB_TOKEN }}
diff --git a/.github/workflows/tests-db-migrations.yaml b/.github/workflows/tests-db-migrations.yaml
index 85eab82539..73d16bedfc 100644
--- a/.github/workflows/tests-db-migrations.yaml
+++ b/.github/workflows/tests-db-migrations.yaml
@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
         with:
           fetch-depth: 2
 
diff --git a/.github/workflows/tests-e2e-docs.yaml b/.github/workflows/tests-e2e-docs.yaml
index 589b71afe5..4133ce1312 100644
--- a/.github/workflows/tests-e2e-docs.yaml
+++ b/.github/workflows/tests-e2e-docs.yaml
@@ -13,7 +13,7 @@ jobs:
 
     steps:
       - name: checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
 
       - name: setup environment
         uses: ./.github/actions/setup
diff --git a/.github/workflows/tests-e2e.yaml b/.github/workflows/tests-e2e.yaml
index 97d0c26996..c5f9d5cea4 100644
--- a/.github/workflows/tests-e2e.yaml
+++ b/.github/workflows/tests-e2e.yaml
@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
 
       - name: setup environment
         uses: ./.github/actions/setup
diff --git a/.github/workflows/tests-integration.yaml b/.github/workflows/tests-integration.yaml
index 0ebeecfa59..c656ea90e8 100644
--- a/.github/workflows/tests-integration.yaml
+++ b/.github/workflows/tests-integration.yaml
@@ -41,7 +41,7 @@ jobs:
 
     steps:
       - name: checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
         with:
           fetch-depth: 2
 
diff --git a/.github/workflows/tests-unit.yaml b/.github/workflows/tests-unit.yaml
index 7c6ceace1c..cc01f385c7 100644
--- a/.github/workflows/tests-unit.yaml
+++ b/.github/workflows/tests-unit.yaml
@@ -6,7 +6,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
         with:
           fetch-depth: 2
 
diff --git a/.github/workflows/typescript-typecheck.yaml b/.github/workflows/typescript-typecheck.yaml
index 235c1d17a2..16156cc51d 100644
--- a/.github/workflows/typescript-typecheck.yaml
+++ b/.github/workflows/typescript-typecheck.yaml
@@ -7,7 +7,7 @@ jobs:
 
     steps:
       - name: checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
         with:
           fetch-depth: 2