diff --git a/.github/workflows/_dependabot-auto-approve-and-merge.yml b/.github/workflows/_dependabot-auto-approve-and-merge.yml
index 9a5b476..529cce8 100644
--- a/.github/workflows/_dependabot-auto-approve-and-merge.yml
+++ b/.github/workflows/_dependabot-auto-approve-and-merge.yml
@@ -26,7 +26,7 @@ jobs:
           egress-policy: audit
 
       - name: Checkout
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Dependabot metadata
         uses: dependabot/fetch-metadata@08eff52bf64351f401fb50d4972fa95b9f2c2d1b # v2.4.0
@@ -62,7 +62,7 @@ jobs:
           egress-policy: audit
 
       - name: Checkout
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Auto-merge
         if: ${{ needs.approve.outputs.update-type != 'version-update:semver-major' }}
diff --git a/.github/workflows/_dotnet-build-and-pack.yml b/.github/workflows/_dotnet-build-and-pack.yml
index 86252c3..5147ace 100644
--- a/.github/workflows/_dotnet-build-and-pack.yml
+++ b/.github/workflows/_dotnet-build-and-pack.yml
@@ -52,15 +52,15 @@ jobs:
             github.com:443
 
       - name: Checkout
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Setup .NET SDK ${{ inputs.dotnet-version }}
-        uses: actions/setup-dotnet@d4c94342e560b34958eacfc5d055d21461ed1c5d # v5.0.0
+        uses: actions/setup-dotnet@2016bd2012dba4e32de620c46fe006a3ac9f0602 # v5.0.1
         with:
           dotnet-version: ${{ inputs.dotnet-version }}
 
       - name: Cache .NET packages
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # 4.3.0
+        uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # 5.0.0
         with:
           path: ~/.nuget/packages # Path to the NuGet package cache
           key: ${{ inputs.os }}-${{ inputs.dotnet-version }}-nuget-${{ hashFiles('**/packages.lock.json') }}
diff --git a/.github/workflows/_dotnet-build-and-test.yml b/.github/workflows/_dotnet-build-and-test.yml
index bdce26e..3c2413b 100644
--- a/.github/workflows/_dotnet-build-and-test.yml
+++ b/.github/workflows/_dotnet-build-and-test.yml
@@ -94,15 +94,15 @@ jobs:
             storage.googleapis.com:443
 
       - name: Checkout
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Setup .NET SDK ${{ matrix.dotnet-version }}
-        uses: actions/setup-dotnet@d4c94342e560b34958eacfc5d055d21461ed1c5d # v5.0.0
+        uses: actions/setup-dotnet@2016bd2012dba4e32de620c46fe006a3ac9f0602 # v5.0.1
         with:
           dotnet-version: ${{ matrix.dotnet-version }}
 
       - name: Cache .NET packages
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # 4.3.0
+        uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # 5.0.0
         with:
           path: ~/.nuget/packages # Path to the NuGet package cache
           key: ${{ inputs.os }}-${{ matrix.dotnet-version }}-nuget-${{ hashFiles('**/packages.lock.json') }}
diff --git a/.github/workflows/_dotnet-publish-nuget.yml b/.github/workflows/_dotnet-publish-nuget.yml
index a97545c..868d9b4 100644
--- a/.github/workflows/_dotnet-publish-nuget.yml
+++ b/.github/workflows/_dotnet-publish-nuget.yml
@@ -79,7 +79,7 @@ jobs:
           path: ${{ inputs.working-directory }}/build-packages # Path to download the artifact
 
       - name: Setup .NET SDK ${{ inputs.dotnet-version }}
-        uses: actions/setup-dotnet@d4c94342e560b34958eacfc5d055d21461ed1c5d # v5.0.0
+        uses: actions/setup-dotnet@2016bd2012dba4e32de620c46fe006a3ac9f0602 # v5.0.1
         with:
           dotnet-version: ${{ inputs.dotnet-version }}
 
diff --git a/.github/workflows/_github-tag-and-release.yml b/.github/workflows/_github-tag-and-release.yml
index 4a472b0..833a244 100644
--- a/.github/workflows/_github-tag-and-release.yml
+++ b/.github/workflows/_github-tag-and-release.yml
@@ -32,7 +32,7 @@ jobs:
           egress-policy: audit
 
       - name: Checkout
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Set up Git configuration
         run: |
diff --git a/.github/workflows/_pr-lint.yml b/.github/workflows/_pr-lint.yml
index c76d9b1..43a22dc 100644
--- a/.github/workflows/_pr-lint.yml
+++ b/.github/workflows/_pr-lint.yml
@@ -35,7 +35,7 @@ jobs:
             github.com:443
 
       - name: Checkout
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           # super-linter needs the full git history to get the
           # list of files that changed across commits
@@ -71,7 +71,7 @@ jobs:
             github.com:443
 
       - name: Checkout
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Spellcheck
         uses: streetsidesoftware/cspell-action@76c6f6d52abd57f4bcab5f3fde1bbd4f19a99eb0 # v7.2.1
diff --git a/.github/workflows/_version.yml b/.github/workflows/_version.yml
index 187f23c..6f43eea 100644
--- a/.github/workflows/_version.yml
+++ b/.github/workflows/_version.yml
@@ -43,7 +43,7 @@ jobs:
             github.com:443
 
       - name: Checkout
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Determine release branch name
         id: release-branch
diff --git a/.github/workflows/dependabot-validate.yml b/.github/workflows/dependabot-validate.yml
index 786f565..9739ca8 100644
--- a/.github/workflows/dependabot-validate.yml
+++ b/.github/workflows/dependabot-validate.yml
@@ -19,7 +19,7 @@ jobs:
           egress-policy: audit
 
       - name: Checkout
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Validate dependabot
         uses: marocchino/validate-dependabot@d8ae5c0d03dd75fbd0ad5f8ab4ba8101ebbd4b37 # v3.0.0