diff --git a/.github/workflows/push-create_tag.yaml b/.github/workflows/push-create_tag.yaml
index 535cf678f9ba8c22195825af4adb314e7a028b97..d27fc933b1860fc6725fdc30759abfa4e8faffc1 100644
--- a/.github/workflows/push-create_tag.yaml
+++ b/.github/workflows/push-create_tag.yaml
@@ -13,7 +13,7 @@ jobs:
     steps:
       - name: Checkout
         if: "${{ ! startsWith(github.event.head_commit.message, 'docs: update changelog for ') }}"
-        uses: actions/checkout@v4.1.6
+        uses: actions/checkout@v4.2.2
         with:
           token: ${{ secrets.PAT }}
           fetch-depth: 0
diff --git a/.github/workflows/push-rebase.yaml b/.github/workflows/push-rebase.yaml
index 18507fea9c3cd00cecdc39da5610e8da6535f913..f4426e3c7778547e017f6784eaa1109357b67917 100644
--- a/.github/workflows/push-rebase.yaml
+++ b/.github/workflows/push-rebase.yaml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Rebase all Dependabot's pull requests on every push to the main branch"
-        uses: bbeesley/gha-auto-dependabot-rebase@v1.5.122
+        uses: bbeesley/gha-auto-dependabot-rebase@v1.5.129
         env:
           GITHUB_TOKEN: ${{ secrets.PAT }}
       - name: "Rebase all users' pull requests on release push to the main branch"
diff --git a/.github/workflows/schedule_update-from-template.yaml b/.github/workflows/schedule_update-from-template.yaml
index e7536a4ad42df3423d562d0ed492c61549a65683..c9878aeb2e7eae3efa7a56e0f190c23e096e09d0 100644
--- a/.github/workflows/schedule_update-from-template.yaml
+++ b/.github/workflows/schedule_update-from-template.yaml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4.1.6
+        uses: actions/checkout@v4.2.2
         with:
           token: ${{ secrets.PAT }}
           fetch-depth: 0
diff --git a/.github/workflows/tag-release.yaml b/.github/workflows/tag-release.yaml
index 7f942f8cb292a3b3f25048022041546ad3355474..6a56689883dbbc3e8f6b64ac70eb33f5f29aeba9 100644
--- a/.github/workflows/tag-release.yaml
+++ b/.github/workflows/tag-release.yaml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4.1.6
+        uses: actions/checkout@v4.2.2
         with:
           token: ${{ secrets.PAT }}
           fetch-depth: 0