diff --git a/.github/workflows/build_code.yml b/.github/workflows/build_code.yml
index ee6ec6d9..b9de8963 100644
--- a/.github/workflows/build_code.yml
+++ b/.github/workflows/build_code.yml
@@ -17,7 +17,7 @@ jobs:
         shell: pwsh
     steps:
     - name: Checkout code 👋
-      uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+      uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
     - name: Install Go 🗳
       uses: ./.github/workflows/composite/bootstrap-go
     - name: Run GoReleaser 🚀
diff --git a/.github/workflows/close_themes_pr.yml b/.github/workflows/close_themes_pr.yml
index 3ce6d779..aaf727b9 100644
--- a/.github/workflows/close_themes_pr.yml
+++ b/.github/workflows/close_themes_pr.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code 👋
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
       - name: Check and close 🔐
         uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410
         with:
diff --git a/.github/workflows/code.yml b/.github/workflows/code.yml
index 31d39e92..8871e654 100644
--- a/.github/workflows/code.yml
+++ b/.github/workflows/code.yml
@@ -24,7 +24,7 @@ jobs:
       with:
         go-version: 1.20.2
     - name: Checkout code
-      uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+      uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
     - name: Golang CI
       uses: golangci/golangci-lint-action@5f1fec7010f6ae3b84ea4f7b2129beb8639b564f
       with:
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 631a5b52..16ee9cae 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -24,7 +24,7 @@ jobs:
       with:
         go-version: 1.20.2
     - name: Checkout code
-      uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+      uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
     - name: Initialize CodeQL
       uses: github/codeql-action/init@83f0fe6c4988d98a455712a27f0255212bba9bd4
       with:
diff --git a/.github/workflows/commits.yml b/.github/workflows/commits.yml
index d7a81b47..4ca2dfa7 100644
--- a/.github/workflows/commits.yml
+++ b/.github/workflows/commits.yml
@@ -6,7 +6,7 @@ jobs:
   commitlint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
         with:
           fetch-depth: 0
       - uses: wagoid/commitlint-github-action@456526eec71276a59e74aafdfe06a9632ac2eee1
diff --git a/.github/workflows/contributors.yml b/.github/workflows/contributors.yml
index d42c1d2f..6a276b72 100644
--- a/.github/workflows/contributors.yml
+++ b/.github/workflows/contributors.yml
@@ -10,7 +10,7 @@ jobs:
     if: github.event.pull_request.merged == true
     steps:
       - name: Checkout code 👋
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
       - name: Check and comment 👩🏾‍💻
         uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410
         with:
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 66527852..521c7197 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Build and Deploy
     steps:
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
         with:
           submodules: true
           persist-credentials: false
diff --git a/.github/workflows/gomod.yml b/.github/workflows/gomod.yml
index 77ec817b..056d7077 100644
--- a/.github/workflows/gomod.yml
+++ b/.github/workflows/gomod.yml
@@ -14,7 +14,7 @@ jobs:
       with:
         go-version: 1.20.2
     - name: Checkout code
-      uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+      uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
     - name: Check for unused dependencies
       run: |
         go mod tidy
diff --git a/.github/workflows/inno.yml b/.github/workflows/inno.yml
index 2439a7e1..2e4b063a 100644
--- a/.github/workflows/inno.yml
+++ b/.github/workflows/inno.yml
@@ -15,7 +15,7 @@ jobs:
         working-directory: ${{ github.workspace }}/packages/inno
     steps:
     - name: Checkout code 👋
-      uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+      uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
     - name: Build installer 📦
       id: build
       env:
diff --git a/.github/workflows/markdown.yml b/.github/workflows/markdown.yml
index 3f23f0da..c16be599 100644
--- a/.github/workflows/markdown.yml
+++ b/.github/workflows/markdown.yml
@@ -7,7 +7,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout code
-      uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+      uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
     - name: Lint files
       uses: articulate/actions-markdownlint@17b8abe7407cd17590c006ecc837c35e1ac3ed83
       with:
diff --git a/.github/workflows/merge_contributions_pr.yml b/.github/workflows/merge_contributions_pr.yml
index 0b6757b0..d4b13fc7 100644
--- a/.github/workflows/merge_contributions_pr.yml
+++ b/.github/workflows/merge_contributions_pr.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code 👋
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
       - name: Check and merge ⛙
         uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410
         with:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7df7f623..e5c6f239 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -19,7 +19,7 @@ jobs:
       skipped: ${{ steps.changelog.outputs.skipped }}
     steps:
       - name: Checkout code 👋
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
       - name: Create changelog ✍️
         id: changelog
         uses: TriPSs/conventional-changelog-action@b7f32a8347e86c26ea2f4823cc7c160b9014c6a0
@@ -41,7 +41,7 @@ jobs:
         working-directory: ${{ github.workspace }}/src
     steps:
       - name: Checkout code 👋
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
       - name: Install Go 🗳
         uses: ./.github/workflows/composite/bootstrap-go
       - name: Tag HEAD 😸
diff --git a/.github/workflows/scoop.yml b/.github/workflows/scoop.yml
index bec6da1d..46940365 100644
--- a/.github/workflows/scoop.yml
+++ b/.github/workflows/scoop.yml
@@ -18,7 +18,7 @@ jobs:
         working-directory: ${{ github.workspace }}/packages/scoop
     steps:
     - name: Checkout code 👋
-      uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+      uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
     - name: Update Template ✍️
       run: |
         ./build.ps1 -Version ${{ github.event.inputs.version }}
diff --git a/.github/workflows/social.yml b/.github/workflows/social.yml
index 111c04f0..7e7e4c37 100644
--- a/.github/workflows/social.yml
+++ b/.github/workflows/social.yml
@@ -13,7 +13,7 @@ jobs:
         with:
           node-version: 18
       - name: Checkout code 👋
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
       - name: Skyt 🌤️
         working-directory: scripts/bluesky
         env:
diff --git a/.github/workflows/winget.yml b/.github/workflows/winget.yml
index 9d873241..516b97c0 100644
--- a/.github/workflows/winget.yml
+++ b/.github/workflows/winget.yml
@@ -17,7 +17,7 @@ jobs:
       WINGETCREATE_TOKEN: ${{ secrets.WINGETCREATE_TOKEN }}
     steps:
     - name: Checkout code 👋
-      uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+      uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
     - name: Create manifest and submit PR 📦
       run: |
         ./build.ps1 -Version "${{ github.event.inputs.version }}" -Token $env:WINGETCREATE_TOKEN