diff --git a/.github/workflows/cff.yml b/.github/workflows/cff.yml
index a7ea7484e..c3812a857 100644
--- a/.github/workflows/cff.yml
+++ b/.github/workflows/cff.yml
@@ -50,7 +50,7 @@ jobs:
     if: github.repository == 'kevinmatthes/aeruginous-rs'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.5.3
+      - uses: actions/checkout@v3.6.0
       - uses: fregante/setup-git-user@v2.0.1
       - run: rustup update
 
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0ebf6956f..7ffed37c5 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -43,7 +43,7 @@ jobs:
     name: actionlint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.5.3
+      - uses: actions/checkout@v3.6.0
         with:
           persist-credentials: false
 
@@ -68,7 +68,7 @@ jobs:
     steps:
       - run: rustup update
 
-      - uses: actions/checkout@v3.5.3
+      - uses: actions/checkout@v3.6.0
         with:
           fetch-depth: 0
           persist-credentials: false
@@ -89,7 +89,7 @@ jobs:
     name: cffconvert
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.5.3
+      - uses: actions/checkout@v3.6.0
         with:
           persist-credentials: false
 
@@ -113,7 +113,7 @@ jobs:
     name: renovate-linter
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.5.3
+      - uses: actions/checkout@v3.6.0
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/comment-changes.yml b/.github/workflows/comment-changes.yml
index c24123f47..1e286d293 100644
--- a/.github/workflows/comment-changes.yml
+++ b/.github/workflows/comment-changes.yml
@@ -42,7 +42,7 @@ jobs:
     name: changelog
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.5.3
+      - uses: actions/checkout@v3.6.0
         with:
           fetch-depth: 0
           ref: ${{ github.head_ref }}
diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml
index 78fc5886c..ce16f106a 100644
--- a/.github/workflows/mirror.yml
+++ b/.github/workflows/mirror.yml
@@ -62,7 +62,7 @@ jobs:
         run: rustup update
 
       - name: checkout
-        uses: actions/checkout@v3.5.3
+        uses: actions/checkout@v3.6.0
         with:
           fetch-depth: 0
           persist-credentials: false
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 8050ce9ee..83ed2b668 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -50,7 +50,7 @@ jobs:
         with:
           python-version: 3.11
 
-      - uses: actions/checkout@v3.5.3
+      - uses: actions/checkout@v3.6.0
         with:
           fetch-depth: 0
           persist-credentials: false
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 165adceb4..52d90f0ca 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -46,7 +46,7 @@ jobs:
     if: github.repository == 'kevinmatthes/aeruginous-rs'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.5.3
+      - uses: actions/checkout@v3.6.0
 
       - id: tag_name
         run: echo "version=$(cat .version)" >> "$GITHUB_OUTPUT"
diff --git a/.github/workflows/ronlog.yml b/.github/workflows/ronlog.yml
index 24d3c5453..684d0d368 100644
--- a/.github/workflows/ronlog.yml
+++ b/.github/workflows/ronlog.yml
@@ -55,7 +55,7 @@ jobs:
       github.repository == 'kevinmatthes/aeruginous-rs'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.5.3
+      - uses: actions/checkout@v3.6.0
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/rustfmt.yml b/.github/workflows/rustfmt.yml
index 9dc14806c..dbfc251ae 100644
--- a/.github/workflows/rustfmt.yml
+++ b/.github/workflows/rustfmt.yml
@@ -45,7 +45,7 @@ jobs:
   reformat:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.5.3
+      - uses: actions/checkout@v3.6.0
         with:
           fetch-depth: 0
           ref: ${{ github.head_ref }}