diff --git a/.github/workflows/cache_cleaner.yml b/.github/workflows/cache_cleaner.yml
index 40370134c0..ed8c958460 100644
--- a/.github/workflows/cache_cleaner.yml
+++ b/.github/workflows/cache_cleaner.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v4.1.7
+        uses: actions/checkout@v4.2.0
 
       - name: Cleanup PR caches
         if: github.event_name != 'workflow_dispatch'
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 145f5a1e62..704df8fa5d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -159,7 +159,7 @@ jobs:
       GRPC_ENABLE_FORK_SUPPORT: false  # See #3434
     steps:
       - name: "Install Git and checkout project"
-        uses: actions/checkout@v4.1.7
+        uses: actions/checkout@v4.2.0
 
       - name: "Login in Github container registry"
         uses: docker/login-action@v3.3.0
@@ -339,7 +339,7 @@ jobs:
 
     steps:
       - name: "Install Git and checkout project"
-        uses: actions/checkout@v4.1.7
+        uses: actions/checkout@v4.2.0
 
       - name: Get event type and user to check permissions.
         id: get_user
@@ -393,7 +393,7 @@ jobs:
 
     steps:
       - name: "Install Git and checkout project"
-        uses: actions/checkout@v4.1.7
+        uses: actions/checkout@v4.2.0
 
       - name: "Login in Github container registry"
         uses: docker/login-action@v3.3.0
@@ -577,7 +577,7 @@ jobs:
       matrix: ${{ steps.set-matrix.outputs.matrix }}
     steps:
       - name: "Install Git and checkout project"
-        uses: actions/checkout@v4.1.7
+        uses: actions/checkout@v4.2.0
 
       - uses: tspascoal/get-user-teams-membership@v3
         id: is_organization_member
@@ -623,7 +623,7 @@ jobs:
 
     steps:
       - name: "Install Git and checkout project"
-        uses: actions/checkout@v4.1.7
+        uses: actions/checkout@v4.2.0
         with:
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           ref: ${{ github.event.pull_request.head.ref }}
@@ -754,7 +754,7 @@ jobs:
 
     steps:
       - name: "Install Git and checkout project"
-        uses: actions/checkout@v4.1.7
+        uses: actions/checkout@v4.2.0
         with:
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           ref: ${{ github.event.pull_request.head.ref }}
@@ -849,7 +849,7 @@ jobs:
       ON_LOCAL: TRUE
 
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
 
       # Skipping because it is installed locally.
       # - name: Setup Python
@@ -972,7 +972,7 @@ jobs:
     needs: upload-docs-release
     steps:
       - name: "Install Git and clone project"
-        uses: actions/checkout@v4.1.7
+        uses: actions/checkout@v4.2.0
 
       - name: "Install the package requirements"
         run: pip install -e .
@@ -1048,7 +1048,7 @@ jobs:
         os: [ubuntu-latest, windows-latest]
 
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
       - name: "Set up Julia"
         uses: julia-actions/setup-julia@v2
         with:
diff --git a/.github/workflows/label.yml b/.github/workflows/label.yml
index be1b959316..45e9c7f6aa 100644
--- a/.github/workflows/label.yml
+++ b/.github/workflows/label.yml
@@ -21,7 +21,7 @@ jobs:
     name: Syncer
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
       - uses: micnncim/action-label-syncer@v1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/linkchecker.yml b/.github/workflows/linkchecker.yml
index 5f9a14a275..b49043b3da 100644
--- a/.github/workflows/linkchecker.yml
+++ b/.github/workflows/linkchecker.yml
@@ -31,7 +31,7 @@ jobs:
       SHELLOPTS: "errexit:pipefail"
     steps:
       - name: "Install Git and checkout project"
-        uses: actions/checkout@v4.1.7
+        uses: actions/checkout@v4.2.0
 
       - name: "Login in Github container registry"
         uses: docker/login-action@v3.3.0
diff --git a/doc/changelog.d/3444.maintenance.md b/doc/changelog.d/3444.maintenance.md
new file mode 100644
index 0000000000..6f6b999d75
--- /dev/null
+++ b/doc/changelog.d/3444.maintenance.md
@@ -0,0 +1 @@
+ci: bump actions/checkout from 4.1.7 to 4.2.0 in the actions group
\ No newline at end of file