diff --git a/.github/workflows/kairos-ubuntu-22-lts.yml b/.github/workflows/kairos-ubuntu-22-lts.yml
index 0e4a6de..5339be7 100644
--- a/.github/workflows/kairos-ubuntu-22-lts.yml
+++ b/.github/workflows/kairos-ubuntu-22-lts.yml
@@ -32,7 +32,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           # renovate: datasource=docker depName=earthly/earthly
           version: "v0.8.7"
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.4
       - uses: docker/setup-qemu-action@v3
 
       - name: Login to GitHub Container Hub
diff --git a/.github/workflows/kairos-zsh-bundle.yml b/.github/workflows/kairos-zsh-bundle.yml
index 2aeef2e..bb304e4 100644
--- a/.github/workflows/kairos-zsh-bundle.yml
+++ b/.github/workflows/kairos-zsh-bundle.yml
@@ -34,7 +34,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           # renovate: datasource=docker depName=earthly/earthly
           version: "v0.8.7"
-      - uses: "actions/checkout@v4.1.1"
+      - uses: "actions/checkout@v4.1.4"
 
       - name: "Login to GitHub Container Hub"
         run: docker login --username "${{ github.actor }}" --password "${{ secrets.GITHUB_TOKEN }}" ghcr.io
diff --git a/.github/workflows/kustomization-tests.yml b/.github/workflows/kustomization-tests.yml
index e1c03ef..028fb86 100644
--- a/.github/workflows/kustomization-tests.yml
+++ b/.github/workflows/kustomization-tests.yml
@@ -40,7 +40,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           # renovate: datasource=docker depName=earthly/earthly
           version: "v0.8.7"
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.4
 
       - name: Build Image
         env:
diff --git a/.github/workflows/universal-silabs-flasher.yml b/.github/workflows/universal-silabs-flasher.yml
index 9aa2c31..48b5ada 100644
--- a/.github/workflows/universal-silabs-flasher.yml
+++ b/.github/workflows/universal-silabs-flasher.yml
@@ -32,7 +32,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           # renovate: datasource=docker depName=earthly/earthly
           version: "v0.8.7"
-      - uses: "actions/checkout@v4.1.1"
+      - uses: "actions/checkout@v4.1.4"
 
       - name: "Login to GitHub Container Hub"
         run: docker login --username "${{ github.actor }}" --password "${{ secrets.GITHUB_TOKEN }}" ghcr.io
diff --git a/.github/workflows/usb-image.yml b/.github/workflows/usb-image.yml
index 1410f32..4120db0 100644
--- a/.github/workflows/usb-image.yml
+++ b/.github/workflows/usb-image.yml
@@ -32,7 +32,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           # renovate: datasource=docker depName=earthly/earthly
           version: "v0.8.7"
-      - uses: "actions/checkout@v4.1.1"
+      - uses: "actions/checkout@v4.1.4"
 
       - name: "Login to GitHub Container Hub"
         if: github.event_name != 'pull_request'
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index 743c798..e7e64d6 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -19,7 +19,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           # renovate: datasource=docker depName=earthly/earthly
           version: "0.8.7"
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.4
       - name: Run validation checks
         run: |
           earthly +validate
@@ -37,7 +37,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           # renovate: datasource=docker depName=earthly/earthly
           version: "0.8.7"
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.4
       - name: Run lint checks
         run: |
           earthly +lint