diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6c96170..5b1508a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -29,7 +29,7 @@ jobs:
     steps:
       - name: Check out repository
         # actions/checkout@v4.2.2 pinned to a commit SHA for supply-chain safety.
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
 
       - name: Set up JDK ${{ matrix.java }}
         # actions/setup-java@v4.7.1 pinned to a commit SHA.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d1e3bf7..3598c0b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -25,7 +25,7 @@ jobs:
     steps:
       - name: Check out repository
         # actions/checkout@v4.2.2
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
 
       - name: Set up JDK
         # actions/setup-java@v4.7.1 — configures a settings.xml whose "github" server authenticates with the