diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3f09a4cf7..ab3536099 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -15,7 +15,7 @@ jobs:
         racket-variant: ["BC", "CS"]
         enable-contracts: [true, false]
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v4.2.2
       - uses: Bogdanp/setup-racket@v1.11
         with:
           architecture: x64
diff --git a/.github/workflows/resyntax-analyze.yml b/.github/workflows/resyntax-analyze.yml
index 64c4b1cd2..442a75421 100644
--- a/.github/workflows/resyntax-analyze.yml
+++ b/.github/workflows/resyntax-analyze.yml
@@ -27,7 +27,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
         # See https://github.com/actions/checkout/issues/118.
         with:
           fetch-depth: 0
diff --git a/.github/workflows/resyntax-autofixer.yml b/.github/workflows/resyntax-autofixer.yml
index 265359096..128d652c7 100644
--- a/.github/workflows/resyntax-autofixer.yml
+++ b/.github/workflows/resyntax-autofixer.yml
@@ -15,7 +15,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
       - name: Install Racket
         uses: Bogdanp/setup-racket@v1.11
         with:
diff --git a/.github/workflows/resyntax-submit-review.yml b/.github/workflows/resyntax-submit-review.yml
index 685078a96..2366c9b73 100644
--- a/.github/workflows/resyntax-submit-review.yml
+++ b/.github/workflows/resyntax-submit-review.yml
@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
       - name: Download Resyntax analysis
         # This uses a github script instead of the download-artifact action because
         # that action doesn't work for artifacts uploaded by other workflows. See