diff --git a/.gitea/workflows/add-autobump.yaml b/.gitea/workflows/add-autobump.yaml
index fe2b301..ac29ed1 100644
--- a/.gitea/workflows/add-autobump.yaml
+++ b/.gitea/workflows/add-autobump.yaml
@@ -38,7 +38,7 @@ jobs:
     name: Allow autobump
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           token: ${{ secrets.GITEA_TOKEN }}
       - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
diff --git a/.gitea/workflows/cd.yaml b/.gitea/workflows/cd.yaml
index 72aaa7c..60e3fa6 100644
--- a/.gitea/workflows/cd.yaml
+++ b/.gitea/workflows/cd.yaml
@@ -19,7 +19,7 @@ jobs:
     name: Release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
       - name: Increment tag
diff --git a/.gitea/workflows/ci.yaml b/.gitea/workflows/ci.yaml
index c7568de..57a0adc 100644
--- a/.gitea/workflows/ci.yaml
+++ b/.gitea/workflows/ci.yaml
@@ -20,7 +20,7 @@ jobs:
           - "bun-npm.json"
           - "golang.json"
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Validate "${{ matrix.json-file }}"
         uses: https://gitea.t000-n.de/t.behrendt/validate-json-by-json-schema-action@30070f7f9c7376fd87998980078688f61cecda59 # 0.1.13
         with:
@@ -30,7 +30,7 @@ jobs:
     name: Format
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
         with:
           bun-version-file: ".bun-version"