diff --git a/.github/workflows/clang-format-check-cn.yml b/.github/workflows/clang-format-check-cn.yml
index 74c03301ff2..4cfa1bb2a5b 100644
--- a/.github/workflows/clang-format-check-cn.yml
+++ b/.github/workflows/clang-format-check-cn.yml
@@ -9,7 +9,7 @@ jobs:
         path:
           - 'prov/opx'
     steps:
-    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+    - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
     - name: Run clang-format style check for C/C++/Protobuf programs (Cornelis Networks-specific).
       uses: jidicula/clang-format-action@c74383674bf5f7c69f60ce562019c1c94bc1421a # v4.13.0
       with:
diff --git a/.github/workflows/clang-format-check.yml b/.github/workflows/clang-format-check.yml
index 3e3eb43755d..7afb11d4147 100644
--- a/.github/workflows/clang-format-check.yml
+++ b/.github/workflows/clang-format-check.yml
@@ -11,7 +11,7 @@ jobs:
         path:
           - 'prov/sm2'
     steps:
-    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+    - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
     - name: Run clang-format style check for C/C++/Protobuf programs.
       uses: jidicula/clang-format-action@c74383674bf5f7c69f60ce562019c1c94bc1421a # v4.13.0
       with:
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index cbc03660646..30e1e3ee04c 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -48,7 +48,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml
index 73f34bb228a..84e3956734c 100644
--- a/.github/workflows/coverity.yml
+++ b/.github/workflows/coverity.yml
@@ -52,7 +52,7 @@ jobs:
         run: |
           sudo apt-get update
           sudo apt-get install -y ${{ env.APT_PACKAGES }}
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - name: Download Coverity tools
         run: |
           wget https://scan.coverity.com/download/linux64 --post-data "token=${{ secrets.COVERITY_SCAN_TOKEN }}&project=ofiwg%2Flibfabric" -O coverity_tool.tgz
diff --git a/.github/workflows/gh-man.yaml b/.github/workflows/gh-man.yaml
index 5400ec94dd2..4f29c5eabc6 100644
--- a/.github/workflows/gh-man.yaml
+++ b/.github/workflows/gh-man.yaml
@@ -25,7 +25,7 @@ jobs:
               echo "$GITHUB_DATA"
 
           - name: Check out the git repo
-            uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+            uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
           - name: Update the man pages in branch gh-pages
             run: .github/workflows/gh-man.sh
diff --git a/.github/workflows/nroff-elves.yaml b/.github/workflows/nroff-elves.yaml
index 669a06bb4dd..e2caa2d9213 100644
--- a/.github/workflows/nroff-elves.yaml
+++ b/.github/workflows/nroff-elves.yaml
@@ -23,7 +23,7 @@ jobs:
               echo "$GITHUB_DATA"
 
           - name: Check out the git repo
-            uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+            uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
           - name: Get the required packages
             run: sudo apt install -y pandoc
diff --git a/.github/workflows/pr-ci.yml b/.github/workflows/pr-ci.yml
index 268b8cec795..450d2aed66b 100644
--- a/.github/workflows/pr-ci.yml
+++ b/.github/workflows/pr-ci.yml
@@ -56,7 +56,7 @@ jobs:
         run: |
           sudo apt-get update
           sudo apt-get install -y ${{ env.APT_PACKAGES }}
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - name: Build Check
         run: |
           set -x
@@ -96,7 +96,7 @@ jobs:
           sudo apt-add-repository 'deb [arch=amd64] https://repositories.intel.com/graphics/ubuntu focal main'
           sudo apt-get update
           sudo apt-get install -y level-zero level-zero-dev
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - name: HMEM Checks
         run: |
           set -x
@@ -126,7 +126,7 @@ jobs:
         run: |
            brew install automake
            brew install --quiet libtool
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - name: Build Check
         run: |
           ./autogen.sh
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 6b793fabd75..7855f755c8c 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -33,7 +33,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
         with:
           persist-credentials: false