diff --git a/.github/workflows/alpine.yml b/.github/workflows/alpine.yml
index d1d3c51e7..da9407dbb 100644
--- a/.github/workflows/alpine.yml
+++ b/.github/workflows/alpine.yml
@@ -24,7 +24,7 @@ jobs:
   ubuntu-build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.2
       - name: start docker
         run: |
           docker run -w /src -dit --name alpine -v $PWD:/src alpine:latest
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 7ab046f46..0a24647eb 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -28,7 +28,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml
index adfa31fe7..b28db84d9 100644
--- a/.github/workflows/documentation.yml
+++ b/.github/workflows/documentation.yml
@@ -22,7 +22,7 @@ jobs:
       id-token: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: Install theme
         run: ./tools/prepare-doxygen.sh
       - uses: mattnotmitt/doxygen-action@452281fb0f5f8a3e8d3f7fa5359cb58f249dfa28 # edge
diff --git a/.github/workflows/lint_and_format_check.yml b/.github/workflows/lint_and_format_check.yml
index 0e1c8ff6e..b4bf3066f 100644
--- a/.github/workflows/lint_and_format_check.yml
+++ b/.github/workflows/lint_and_format_check.yml
@@ -24,7 +24,7 @@ jobs:
   lint-and-format:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
 
       - name: Install clang-format
         run: |
diff --git a/.github/workflows/release-script-tests.yml b/.github/workflows/release-script-tests.yml
index 758be612f..54c4ee2ee 100644
--- a/.github/workflows/release-script-tests.yml
+++ b/.github/workflows/release-script-tests.yml
@@ -26,7 +26,7 @@ jobs:
         working-directory: ./tools/release
 
     steps:
-      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: Install dependencies
         run: pip3 install -r requirements.txt
       - name: Run tests
diff --git a/.github/workflows/release_create.yml b/.github/workflows/release_create.yml
index a38c9cb61..818f50e16 100644
--- a/.github/workflows/release_create.yml
+++ b/.github/workflows/release_create.yml
@@ -36,7 +36,7 @@ jobs:
       NEXT_RELEASE_TAG: ${{ github.event.pull_request.head.ref }}
     steps:
       - name: Checkout
-        uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       
       - name: Install dependencies
         run: pip3 install -r ./tools/release/requirements.txt
diff --git a/.github/workflows/release_prepare.yml b/.github/workflows/release_prepare.yml
index e6b059268..5fa77b152 100644
--- a/.github/workflows/release_prepare.yml
+++ b/.github/workflows/release_prepare.yml
@@ -26,7 +26,7 @@ jobs:
     env:
       CXX: clang++-14
     steps:
-      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
   
       - name: Install dependencies
         run: pip3 install -r ./tools/release/requirements.txt
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index a1c564497..80ee2b55b 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -30,7 +30,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/ubuntu-release.yml b/.github/workflows/ubuntu-release.yml
index c050bcda3..cdd18c1fc 100644
--- a/.github/workflows/ubuntu-release.yml
+++ b/.github/workflows/ubuntu-release.yml
@@ -27,7 +27,7 @@ jobs:
       matrix:
         cxx: [g++-12, clang++-14]
     steps:
-      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: Setup Ninja
         run: sudo apt-get install ninja-build
       - name: Prepare
diff --git a/.github/workflows/ubuntu-s390x.yml b/.github/workflows/ubuntu-s390x.yml
index 92eb72ba4..9f5743b82 100644
--- a/.github/workflows/ubuntu-s390x.yml
+++ b/.github/workflows/ubuntu-s390x.yml
@@ -24,7 +24,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - uses: uraimo/run-on-arch-action@a8003307a739516fdd80ee6d3da8924db811b8da # v2.5.0
         name: Test
         id: runcmd
diff --git a/.github/workflows/ubuntu-sanitized.yml b/.github/workflows/ubuntu-sanitized.yml
index 3621b2448..52e01b9f0 100644
--- a/.github/workflows/ubuntu-sanitized.yml
+++ b/.github/workflows/ubuntu-sanitized.yml
@@ -27,7 +27,7 @@ jobs:
       matrix:
         shared: [ON, OFF]
     steps:
-      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: Setup Ninja
         run: sudo apt-get install ninja-build
       - name: Prepare
diff --git a/.github/workflows/ubuntu-undef.yml b/.github/workflows/ubuntu-undef.yml
index 5a2ce7643..b2772d2b9 100644
--- a/.github/workflows/ubuntu-undef.yml
+++ b/.github/workflows/ubuntu-undef.yml
@@ -27,7 +27,7 @@ jobs:
       matrix:
         shared: [ON, OFF]
     steps:
-      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: Setup Ninja
         run: sudo apt-get install ninja-build
       - name: Prepare
diff --git a/.github/workflows/ubuntu.yml b/.github/workflows/ubuntu.yml
index 90c7d9860..851bb9f6a 100644
--- a/.github/workflows/ubuntu.yml
+++ b/.github/workflows/ubuntu.yml
@@ -28,7 +28,7 @@ jobs:
         shared: [ON, OFF]
         cxx: [g++-12, clang++-14]
     steps:
-      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: Setup Ninja
         run: sudo apt-get install ninja-build
       - name: Prepare
diff --git a/.github/workflows/ubuntu_install.yml b/.github/workflows/ubuntu_install.yml
index cb55cf86c..d25de0033 100644
--- a/.github/workflows/ubuntu_install.yml
+++ b/.github/workflows/ubuntu_install.yml
@@ -24,7 +24,7 @@ jobs:
   ubuntu-build:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: Setup Ninja
         run: sudo apt-get install ninja-build
       - name: Prepare
diff --git a/.github/workflows/ubuntu_old.yml b/.github/workflows/ubuntu_old.yml
index 08ee01b2e..797746ec4 100644
--- a/.github/workflows/ubuntu_old.yml
+++ b/.github/workflows/ubuntu_old.yml
@@ -28,7 +28,7 @@ jobs:
         shared: [ON, OFF]
         cxx: [g++-9, clang++-10]
     steps:
-      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: Setup Ninja
         run: sudo apt-get install ninja-build
       - name: Prepare
diff --git a/.github/workflows/ubuntu_pedantic.yml b/.github/workflows/ubuntu_pedantic.yml
index 593488310..91b98328b 100644
--- a/.github/workflows/ubuntu_pedantic.yml
+++ b/.github/workflows/ubuntu_pedantic.yml
@@ -27,7 +27,7 @@ jobs:
       matrix:
         shared: [ON, OFF]
     steps:
-      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: Setup Ninja
         run: sudo apt-get install ninja-build
       - name: Prepare
diff --git a/.github/workflows/visual_studio.yml b/.github/workflows/visual_studio.yml
index 377581ce0..df5aa8667 100644
--- a/.github/workflows/visual_studio.yml
+++ b/.github/workflows/visual_studio.yml
@@ -30,7 +30,7 @@ jobs:
         include:
           - {gen: Visual Studio 17 2022, arch: x64, devchecks: ON}
     steps:
-    - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
+    - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
     - name: Configure
       run: |
         cmake -DADA_DEVELOPMENT_CHECKS="${{matrix.devchecks}}" -G "${{matrix.gen}}" -A ${{matrix.arch}} -B build
diff --git a/.github/workflows/visual_studio_clang.yml b/.github/workflows/visual_studio_clang.yml
index 077c04fba..660952efe 100644
--- a/.github/workflows/visual_studio_clang.yml
+++ b/.github/workflows/visual_studio_clang.yml
@@ -30,7 +30,7 @@ jobs:
         include:
           - {gen: Visual Studio 17 2022, arch: x64, devchecks: ON}
     steps:
-    - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
+    - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
     - name: Configure
       run: |
         cmake -DADA_DEVELOPMENT_CHECKS="${{matrix.devchecks}}" -G "${{matrix.gen}}" -A ${{matrix.arch}} -T ClangCL -B build
diff --git a/.github/workflows/wpt-updater.yml b/.github/workflows/wpt-updater.yml
index 62947ce82..cce3944d6 100644
--- a/.github/workflows/wpt-updater.yml
+++ b/.github/workflows/wpt-updater.yml
@@ -21,7 +21,7 @@ jobs:
       contents: write
       pull-requests: write
     steps:
-      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: Fetch tests
         run: tools/update-wpt.sh
       - name: Open pull request