diff --git a/.github/workflows/add_release_assets.yml b/.github/workflows/add_release_assets.yml
index da569f79..64b48687 100644
--- a/.github/workflows/add_release_assets.yml
+++ b/.github/workflows/add_release_assets.yml
@@ -11,7 +11,7 @@ jobs:
     if: (github.head_ref == 'knope/release' && github.event.pull_request.merged == true) || github.event_name == 'workflow_dispatch'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
       - run: echo "tag_name=$(gh release list --json 'isDraft,tagName' --jq '.[] | select(.isDraft) | .tagName')" >> $GITHUB_OUTPUT
         env:
           GH_TOKEN: ${{ github.token }}
@@ -38,7 +38,7 @@ jobs:
     name: ${{ matrix.target }}
 
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
       - uses: Swatinem/rust-cache@v2
       - name: Install host target
         run: rustup target add ${{ matrix.target }}
@@ -83,7 +83,7 @@ jobs:
     needs: [build-artifacts, get-tag]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
       - uses: actions/download-artifact@v4.1.8
         with:
           path: artifacts
diff --git a/.github/workflows/publish_crates.yml b/.github/workflows/publish_crates.yml
index ca00552f..cd2beb19 100644
--- a/.github/workflows/publish_crates.yml
+++ b/.github/workflows/publish_crates.yml
@@ -11,7 +11,7 @@ jobs:
     if:  (github.head_ref == 'knope/release' && github.event.pull_request.merged == true) || github.event_name == 'workflow_dispatch'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
       - uses: Swatinem/rust-cache@v2
       - name: Install cargo-release
         run: cargo install cargo-release
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index e3805eba..5e1a0b22 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -16,7 +16,7 @@ jobs:
         os: [ubuntu-latest, windows-latest]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
       - uses: Swatinem/rust-cache@v2
       - uses: actions/setup-node@v4
         if: matrix.os == 'ubuntu-latest'
diff --git a/docs/src/content/docs/recipes/1-preview-releases-with-pull-requests.md b/docs/src/content/docs/recipes/1-preview-releases-with-pull-requests.md
index c165c462..cf9b05c5 100644
--- a/docs/src/content/docs/recipes/1-preview-releases-with-pull-requests.md
+++ b/docs/src/content/docs/recipes/1-preview-releases-with-pull-requests.md
@@ -138,7 +138,7 @@ jobs:
     if: "!contains(github.event.head_commit.message, 'chore: prepare release')" # Skip merges from releases
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
         with:
           fetch-depth: 0
           token: ${{ secrets.PAT }}
@@ -215,7 +215,7 @@ release:
   needs: [build-artifacts]
   runs-on: ubuntu-latest
   steps:
-    - uses: actions/checkout@v4.1.7
+    - uses: actions/checkout@v4.2.0
     - uses: actions/download-artifact@v4.1.8
       with:
         path: artifacts
@@ -267,7 +267,7 @@ jobs:
     name: ${{ matrix.target }}
 
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
       - uses: Swatinem/rust-cache@v2.7.3
       - name: Install host target
         run: rustup target add ${{ matrix.target }}
@@ -305,7 +305,7 @@ jobs:
     needs: [build-artifacts]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
       - uses: actions/download-artifact@v4.1.8
         with:
           path: artifacts
@@ -321,7 +321,7 @@ jobs:
     needs: [release]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
       - uses: Swatinem/rust-cache@v2.7.3
       - uses: katyo/publish-crates@v2
         with:
diff --git a/docs/src/content/docs/recipes/workflow-dispatch-releases.md b/docs/src/content/docs/recipes/workflow-dispatch-releases.md
index 4d546bda..cc545fb3 100644
--- a/docs/src/content/docs/recipes/workflow-dispatch-releases.md
+++ b/docs/src/content/docs/recipes/workflow-dispatch-releases.md
@@ -34,7 +34,7 @@ jobs:
     outputs:
       sha: ${{ steps.commit.outputs.sha }}
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
         name: Fetch entire history (for conventional commits)
         with:
           fetch-depth: 0
@@ -74,7 +74,7 @@ jobs:
     name: ${{ matrix.target }}
 
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
         with:
           ref: ${{ needs.prepare-release.outputs.sha }}
 
@@ -115,7 +115,7 @@ jobs:
     needs: [build-artifacts, prepare-release]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.0
         with:
           ref: ${{ needs.prepare-release.outputs.sha }}
       - uses: actions/download-artifact@v4.1.8