diff --git a/.github/workflows/app.yaml b/.github/workflows/app.yaml
index e903fe0e4..a01af83bf 100644
--- a/.github/workflows/app.yaml
+++ b/.github/workflows/app.yaml
@@ -63,7 +63,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # ratchet:actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - name: Set up QEMU
         uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c0a7 # ratchet:docker/setup-qemu-action@v2
       - name: Set up Docker Buildx
@@ -114,7 +114,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # ratchet:actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - name: "Authenticate to Google Cloud"
         uses: "google-github-actions/auth@55bd3a7c6e2ae7cf1877fd1ccb9d54c0503c457c" # ratchet:google-github-actions/auth@v2
         with:
diff --git a/.github/workflows/build-images.yaml b/.github/workflows/build-images.yaml
index 78638ded1..75fa2f343 100644
--- a/.github/workflows/build-images.yaml
+++ b/.github/workflows/build-images.yaml
@@ -61,7 +61,7 @@ jobs:
           sudo mv ./argo-linux-amd64 /usr/local/bin/argo
           argo version
       - name: Check out repository code
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # ratchet:actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - name: Inject slug/short variables
         uses: rlespinasse/github-slug-action@102b1a064a9b145e56556e22b18b19c624538d94 # ratchet:rlespinasse/github-slug-action@v4
         with:
diff --git a/.github/workflows/build-nix-images.yaml b/.github/workflows/build-nix-images.yaml
index 67b89893b..447392483 100644
--- a/.github/workflows/build-nix-images.yaml
+++ b/.github/workflows/build-nix-images.yaml
@@ -98,7 +98,7 @@ jobs:
           fi
           argo version
       - name: Check out repository
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # ratchet:actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - name: Setup tmate debug session
         if: ${{ inputs.debug_enabled == 'true' }}
         uses: mxschmitt/action-tmate@a283f9441d2d96eb62436dc46d7014f5d357ac22 # ratchet:mxschmitt/action-tmate@v3
diff --git a/.github/workflows/cid.yaml b/.github/workflows/cid.yaml
index 811dd0055..5d0264873 100644
--- a/.github/workflows/cid.yaml
+++ b/.github/workflows/cid.yaml
@@ -134,7 +134,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # ratchet:actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           ref: ${{ needs.set-variables.outputs.checkout_ref }}
 
@@ -185,7 +185,7 @@ jobs:
           echo "DEBUG=${{ needs.set-variables.outputs.debug }}"
           echo "MODE=${{ needs.set-variables.outputs.mode }}"
       - name: Checkout code
-        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # ratchet:actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           ref: ${{ needs.set-variables.outputs.checkout_ref }}
       - name: Setup environment
@@ -235,7 +235,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # ratchet:actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           ref: ${{ needs.set-variables.outputs.checkout_ref }}
       - name: setup gcp credentials
@@ -299,7 +299,7 @@ jobs:
           remove-android: "true"
           remove-codeql: "true"
           remove-docker-images: "true"
-      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # ratchet:actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           ref: ${{ needs.set-variables.outputs.checkout_ref }}
       - uses: DeterminateSystems/nix-installer-action@7993355175c2765e5733dae74f3e0786fe0e5c4f # ratchet:DeterminateSystems/nix-installer-action@v12
@@ -386,7 +386,7 @@ jobs:
       WORKFLOW_IMAGE: ${{ vars.WORKFLOW_IMAGE }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # ratchet:actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           ref: ${{ needs.set-variables.outputs.checkout_ref }}
       - name: Setup environment
@@ -440,7 +440,7 @@ jobs:
       git-head: ${{ steps.semanticrelease.outputs.git-head }}
       git-tag: ${{ steps.semanticrelease.outputs.git-tag }}
     steps:
-      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # ratchet:actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           ref: ${{ needs.set-variables.outputs.checkout_ref }}
       - uses: DeterminateSystems/nix-installer-action@7993355175c2765e5733dae74f3e0786fe0e5c4f # ratchet:DeterminateSystems/nix-installer-action@v12
@@ -478,7 +478,7 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # ratchet:actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           ref: ${{ needs.release.outputs.git-tag }}
       - uses: DeterminateSystems/nix-installer-action@7993355175c2765e5733dae74f3e0786fe0e5c4f # ratchet:DeterminateSystems/nix-installer-action@v12
@@ -531,7 +531,7 @@ jobs:
       contents: read
       pages: read
     steps:
-      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # ratchet:actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           ref: ${{ needs.set-variables.outputs.checkout_ref }}
       - name: Setup environment
@@ -555,7 +555,7 @@ jobs:
       pages: read
     environment: github-pages
     steps:
-      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # ratchet:actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           ref: ${{ needs.release.outputs.git-tag }}
       - name: Setup environment
diff --git a/.github/workflows/cml-images.yml b/.github/workflows/cml-images.yml
index 8e8b35ec9..8e393edf1 100644
--- a/.github/workflows/cml-images.yml
+++ b/.github/workflows/cml-images.yml
@@ -40,7 +40,7 @@ jobs:
           echo "        BASE_REF:" "$GITHUB_BASE_REF"
           echo "             SHA:" "$GITHUB_SHA"
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # ratchet:actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - name: Set up QEMU
         uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c0a7 # ratchet:docker/setup-qemu-action@v2
       - name: Set up Docker Buildx
@@ -91,7 +91,7 @@ jobs:
           echo "        BASE_REF:" "$GITHUB_BASE_REF"
           echo "             SHA:" "$GITHUB_SHA"
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # ratchet:actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - name: Set up QEMU
         uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c0a7 # ratchet:docker/setup-qemu-action@v2
       - name: Set up Docker Buildx
diff --git a/.github/workflows/colab.yml b/.github/workflows/colab.yml
index 851d083fa..0ca1a6e41 100644
--- a/.github/workflows/colab.yml
+++ b/.github/workflows/colab.yml
@@ -48,7 +48,7 @@ jobs:
           echo "  BASE_REF:" "$GITHUB_BASE_REF"
           echo "       SHA:" "$GITHUB_SHA"
       - name: Retrieve the source code
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # ratchet:actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           fetch-depth: 0
           ref: ${{ github.sha }}
diff --git a/.github/workflows/conda.yaml b/.github/workflows/conda.yaml
index 8ac92e9d0..2f43eae78 100644
--- a/.github/workflows/conda.yaml
+++ b/.github/workflows/conda.yaml
@@ -57,7 +57,7 @@ jobs:
           echo "  BASE_REF:" "$GITHUB_BASE_REF"
           echo "       SHA:" "$GITHUB_SHA"
       - name: Retrieve source code
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # ratchet:actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           fetch-depth: 0
           ref: ${{ github.sha }}
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index 0f06704cb..b7e4f6aca 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out the repository
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # ratchet:actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
 
       - name: Run Labeler
         uses: crazy-max/ghaction-github-labeler@de749cf181958193cb7debf1a9c5bb28922f3e1b # ratchet:crazy-max/ghaction-github-labeler@v5.0.0