diff --git a/.github/workflows/alpha-release.yml b/.github/workflows/alpha-release.yml
index b2ad7e3..7959166 100644
--- a/.github/workflows/alpha-release.yml
+++ b/.github/workflows/alpha-release.yml
@@ -12,7 +12,7 @@ jobs:
       - size-m-x64
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 0
           ref: ${{ github.ref }}
diff --git a/.github/workflows/check-typos.yml b/.github/workflows/check-typos.yml
index aedbb25..78e7792 100644
--- a/.github/workflows/check-typos.yml
+++ b/.github/workflows/check-typos.yml
@@ -12,9 +12,9 @@ jobs:
       - size-m-x64
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Check for typos
-        uses: crate-ci/typos@f8a58b6b53f2279f71eb605f03a4ae4d10608f45 # v1.47.0
+        uses: crate-ci/typos@37bb98842b0d8c4ffebdb75301a13db0267cef89 # v1.47.2
         with:
           config: .github/typos.toml
diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index 564bf05..677030e 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -23,10 +23,10 @@ jobs:
       - self-hosted-ghr
       - size-m-x64
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - uses: ./.github/workflows/go-setup
       - uses: ./.github/workflows/kurtosis-install
       - run: go test -v -race -coverprofile=coverage.txt ./...
-      - uses: codecov/codecov-action@v6
+      - uses: codecov/codecov-action@v7
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml
index 89e67a6..89b6a27 100644
--- a/.github/workflows/golangci-lint.yml
+++ b/.github/workflows/golangci-lint.yml
@@ -23,7 +23,7 @@ jobs:
       - size-m-x64
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 0
       - uses: ./.github/workflows/go-setup
diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml
index f0ca35a..13d8277 100644
--- a/.github/workflows/govulncheck.yml
+++ b/.github/workflows/govulncheck.yml
@@ -18,7 +18,7 @@ jobs:
       - self-hosted-ghr
       - size-m-x64
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - uses: ./.github/workflows/go-setup
       - name: Install govulncheck
         run: go install golang.org/x/vuln/cmd/govulncheck@latest
diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml
index fb94a92..a5e40db 100644
--- a/.github/workflows/integration-tests.yml
+++ b/.github/workflows/integration-tests.yml
@@ -17,7 +17,7 @@ jobs:
       - size-m-x64
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v6.0.3
       - name: Build contributoor image
         run: |
           docker build -f Dockerfile.ci -t ethpandaops/contributoor:local .
diff --git a/.github/workflows/manual-telegram-notify.yml b/.github/workflows/manual-telegram-notify.yml
index 01c58ca..7773b6c 100644
--- a/.github/workflows/manual-telegram-notify.yml
+++ b/.github/workflows/manual-telegram-notify.yml
@@ -26,7 +26,7 @@ jobs:
       - size-m-x64
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Get release info
         id: release_info
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a4d7c01..3a61f54 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 0