diff --git a/.github/workflows/_parse_version.yml b/.github/workflows/_parse_version.yml
index 5041b9aa287..410a0b9b20e 100644
--- a/.github/workflows/_parse_version.yml
+++ b/.github/workflows/_parse_version.yml
@@ -75,7 +75,7 @@ jobs:
       local: ${{ steps.version.outputs.local }}
       no_local: ${{ steps.version.outputs.no_local }}
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # pin v4.1.3
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # pin v4.1.4
         with:
           ref: ${{ inputs.commit_sha }}
         timeout-minutes: 5
diff --git a/.github/workflows/_releaser_nightly_build.yml b/.github/workflows/_releaser_nightly_build.yml
index a83fc66f463..354593e905d 100644
--- a/.github/workflows/_releaser_nightly_build.yml
+++ b/.github/workflows/_releaser_nightly_build.yml
@@ -25,7 +25,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # pin v4.1.3
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # pin v4.1.4
         timeout-minutes: 5
 
       - name: Configure git
diff --git a/.github/workflows/ci-docs.yml b/.github/workflows/ci-docs.yml
index 9c127c097d6..0f27127c236 100644
--- a/.github/workflows/ci-docs.yml
+++ b/.github/workflows/ci-docs.yml
@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-22.04
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # pin v4.1.3
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # pin v4.1.4
         with:
           sparse-checkout: |
             .github
diff --git a/.github/workflows/ci-python.yml b/.github/workflows/ci-python.yml
index afac8f6fe90..50a0a78dd91 100644
--- a/.github/workflows/ci-python.yml
+++ b/.github/workflows/ci-python.yml
@@ -48,7 +48,7 @@ jobs:
     # 20.04 is required to install PostgreSQL 12
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # pin v4.1.3
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # pin v4.1.4
         timeout-minutes: 5
 
       - name: Set apt mirror
diff --git a/.github/workflows/ci-rust.yml b/.github/workflows/ci-rust.yml
index 053013a23af..72efe5ca070 100644
--- a/.github/workflows/ci-rust.yml
+++ b/.github/workflows/ci-rust.yml
@@ -67,7 +67,7 @@ jobs:
         ports:
           - 6777:6777
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # pin v4.1.3
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # pin v4.1.4
         timeout-minutes: 5
 
       - uses: actions-rust-lang/setup-rust-toolchain@b113a30d27a8e59c969077c0a0168cc13dab5ffc # pin v1.8.0
@@ -96,7 +96,7 @@ jobs:
         timeout-minutes: 5
 
       # Install cargo nextest command
-      - uses: taiki-e/install-action@e7e3978ba00920884c8a5790a28699b85397e972 # pin v2.33.6
+      - uses: taiki-e/install-action@00a67321d66e038602baf558d366a594a7019ea2 # pin v2.33.9
         with:
           tool: nextest@0.9.54, wasm-pack@0.11.0, cargo-deny@0.14.3
 
@@ -193,7 +193,7 @@ jobs:
     timeout-minutes: 60
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # pin v4.1.3
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # pin v4.1.4
         timeout-minutes: 5
 
       - uses: actions-rust-lang/setup-rust-toolchain@b113a30d27a8e59c969077c0a0168cc13dab5ffc # pin v1.8.0
@@ -232,7 +232,7 @@ jobs:
           mv 'D:/a/_temp/winfsp-tests-x64.exe' 'C:/Program Files (x86)/WinFsp/bin/'
 
       # Install cargo nextest command
-      - uses: taiki-e/install-action@e7e3978ba00920884c8a5790a28699b85397e972 # pin v2.33.6
+      - uses: taiki-e/install-action@00a67321d66e038602baf558d366a594a7019ea2 # pin v2.33.9
         with:
           tool: nextest@0.9.54
 
diff --git a/.github/workflows/ci-web.yml b/.github/workflows/ci-web.yml
index 39480caf50e..466424a2754 100644
--- a/.github/workflows/ci-web.yml
+++ b/.github/workflows/ci-web.yml
@@ -40,7 +40,7 @@ jobs:
         ports:
           - 6777:6777
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # pin v4.1.3
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # pin v4.1.4
         timeout-minutes: 5
 
       - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8  # pin v4.0.2
@@ -110,7 +110,7 @@ jobs:
         timeout-minutes: 5
 
       # Install wasm-pack command
-      - uses: taiki-e/install-action@e7e3978ba00920884c8a5790a28699b85397e972 # pin v2.33.6
+      - uses: taiki-e/install-action@00a67321d66e038602baf558d366a594a7019ea2 # pin v2.33.9
         with:
           tool: wasm-pack@${{ env.wasm-pack-version }}
 
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 008af1b203e..f26bd12d257 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -35,7 +35,7 @@ jobs:
       web: ${{ steps.need-check.outputs.web }}
       docs: ${{ steps.need-check.outputs.docs }}
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # pin v4.1.3
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # pin v4.1.4
         timeout-minutes: 5
 
       - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36  # pin v3.0.2
@@ -129,7 +129,7 @@ jobs:
     # Just a fail-safe timeout, see the fine grain per-task timeout instead
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # pin v4.1.3
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # pin v4.1.4
         timeout-minutes: 5
 
       - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36  # pin v3.0.2
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 9fc5661985f..9379a081d04 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -34,7 +34,7 @@ jobs:
       poetry-version: 1.5.1
     steps:
       - name: Checkout repository
-        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # pin v4.1.3
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # pin v4.1.4
         timeout-minutes: 5
 
       - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36  # pin v3.0.2
@@ -101,7 +101,7 @@ jobs:
   #     SDK_VERSION: 30.0.3
   #   steps:
   #     - name: Checkout repository
-  #       uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # pin v4.1.3
+  #       uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # pin v4.1.4
   #       timeout-minutes: 5
 
   #     - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36  # pin v3.0.2
@@ -171,7 +171,7 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Checkout repository
-        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # pin v4.1.3
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # pin v4.1.4
         timeout-minutes: 5
 
       - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36  # pin v3.0.2
diff --git a/.github/workflows/cspell.yml b/.github/workflows/cspell.yml
index 0c4338f5625..42fdc186b9e 100644
--- a/.github/workflows/cspell.yml
+++ b/.github/workflows/cspell.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # pin v4.1.3
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # pin v4.1.4
         timeout-minutes: 5
 
       - name: Generate cspell cache key
diff --git a/.github/workflows/docker-server.yml b/.github/workflows/docker-server.yml
index aa831ce942b..6aba2424333 100644
--- a/.github/workflows/docker-server.yml
+++ b/.github/workflows/docker-server.yml
@@ -28,7 +28,7 @@ jobs:
   docker-server:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # pin v4.1.3
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # pin v4.1.4
         timeout-minutes: 3
 
       # Set up BuildKit Docker container builder to be able to build
diff --git a/.github/workflows/docker-testbed.yml b/.github/workflows/docker-testbed.yml
index 7ed863bc116..d49c00818f8 100644
--- a/.github/workflows/docker-testbed.yml
+++ b/.github/workflows/docker-testbed.yml
@@ -37,7 +37,7 @@ jobs:
   docker-testbed:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # pin v4.1.3
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # pin v4.1.4
         timeout-minutes: 5
 
       # Set up BuildKit Docker container builder to be able to build
diff --git a/.github/workflows/package-client.yml b/.github/workflows/package-client.yml
index 266a344b191..9b452a6c94f 100644
--- a/.github/workflows/package-client.yml
+++ b/.github/workflows/package-client.yml
@@ -62,7 +62,7 @@ jobs:
     runs-on: ubuntu-22.04
     name: ⚡ Package web app
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # pin v4.1.3
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # pin v4.1.4
         with:
           ref: ${{ inputs.commit_sha }}
         timeout-minutes: 5
@@ -73,7 +73,7 @@ jobs:
         timeout-minutes: 2
 
       - name: Download version.patch artifact
-        uses: actions/download-artifact@9c19ed7fe5d278cd354c7dfd5d3b88589c7e2395 # pin v4.1.6
+        uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # pin v4.1.7
         with:
           name: version.patch
           path: ${{ runner.temp }}/version.patch
@@ -87,7 +87,7 @@ jobs:
         working-directory: client
 
       # Install syft
-      - uses: taiki-e/install-action@e7e3978ba00920884c8a5790a28699b85397e972 # pin v2.33.6
+      - uses: taiki-e/install-action@00a67321d66e038602baf558d366a594a7019ea2 # pin v2.33.9
         with:
           tool: syft@0.84.0, wasm-pack@${{ env.wasm-pack-version }}
 
@@ -114,13 +114,13 @@ jobs:
     # Always run the job if `version` job is skipped otherwise only if `version` job was successful.
     if: ${{ inputs.version_patch_run_id != '' && always() || success() }}
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # pin v4.1.3
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # pin v4.1.4
         with:
           ref: ${{ inputs.commit_sha }}
         timeout-minutes: 5
 
       - name: Download version.patch artifact
-        uses: actions/download-artifact@9c19ed7fe5d278cd354c7dfd5d3b88589c7e2395 # pin v4.1.6
+        uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # pin v4.1.7
         with:
           name: version.patch
           path: ${{ runner.temp }}/version.patch
@@ -163,7 +163,7 @@ jobs:
           mv -v parsec-v3_*_*.snap Parsec-v3_${{ steps.version.outputs.full }}_linux_$ARCH.snap
 
       # Install syft
-      - uses: taiki-e/install-action@e7e3978ba00920884c8a5790a28699b85397e972 # pin v2.33.6
+      - uses: taiki-e/install-action@00a67321d66e038602baf558d366a594a7019ea2 # pin v2.33.9
         with:
           tool: syft@0.84.0
 
@@ -197,7 +197,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     timeout-minutes: 60
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # pin v4.1.3
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # pin v4.1.4
         with:
           ref: ${{ inputs.commit_sha }}
         timeout-minutes: 5
@@ -208,7 +208,7 @@ jobs:
         timeout-minutes: 2
 
       - name: Download version.patch artifact
-        uses: actions/download-artifact@9c19ed7fe5d278cd354c7dfd5d3b88589c7e2395 # pin v4.1.6
+        uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # pin v4.1.7
         with:
           name: version.patch
           path: ${{ runner.temp }}/version.patch
@@ -257,7 +257,7 @@ jobs:
         timeout-minutes: 5
 
       # Install syft
-      - uses: taiki-e/install-action@e7e3978ba00920884c8a5790a28699b85397e972 # pin v2.33.6
+      - uses: taiki-e/install-action@00a67321d66e038602baf558d366a594a7019ea2 # pin v2.33.9
         with:
           tool: syft@0.84.0
 
diff --git a/.github/workflows/package-server.yml b/.github/workflows/package-server.yml
index 9db7ff8fd45..23fc5c64b83 100644
--- a/.github/workflows/package-server.yml
+++ b/.github/workflows/package-server.yml
@@ -76,7 +76,7 @@ jobs:
     name: "${{ matrix.name }}: 📦 Packaging (build Wheel)"
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # pin v4.1.3
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # pin v4.1.4
         with:
           ref: ${{ inputs.commit_sha }}
         timeout-minutes: 5
@@ -88,7 +88,7 @@ jobs:
         timeout-minutes: 10
 
       - name: Download version.patch artifact
-        uses: actions/download-artifact@9c19ed7fe5d278cd354c7dfd5d3b88589c7e2395 # pin v4.1.6
+        uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # pin v4.1.7
         with:
           name: version.patch
           path: ${{ runner.temp }}/version.patch
@@ -135,7 +135,7 @@ jobs:
         run: python server/packaging/wheel/wheel_it.py ./server --output dist --skip-wheel
 
       # Install syft
-      - uses: taiki-e/install-action@e7e3978ba00920884c8a5790a28699b85397e972 # pin v2.33.6
+      - uses: taiki-e/install-action@00a67321d66e038602baf558d366a594a7019ea2 # pin v2.33.9
         with:
           tool: syft@0.84.0
 
diff --git a/.github/workflows/releaser.yml b/.github/workflows/releaser.yml
index 311b9ad108a..c1d96617e48 100644
--- a/.github/workflows/releaser.yml
+++ b/.github/workflows/releaser.yml
@@ -73,7 +73,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Download every artifact generated (and uploaded)
-        uses: actions/download-artifact@9c19ed7fe5d278cd354c7dfd5d3b88589c7e2395 # pin v4.1.6
+        uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # pin v4.1.7
         with:
           path: artifacts
         timeout-minutes: 5