diff --git a/.github/workflows/pull_request.yml b/.github/workflows/pull_request.yml
index 60c1339e..6f11bbbf 100644
--- a/.github/workflows/pull_request.yml
+++ b/.github/workflows/pull_request.yml
@@ -1,11 +1,18 @@
 name: pull_request
 on: pull_request
+
+#
+# Work around https://github.com/actions/checkout/issues/1590
+#
+env:
+  ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: true
+
 jobs:
   ubuntu-20:
     timeout-minutes: 10
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: pre-push
         run: |
           sudo apt-get update
@@ -17,7 +24,7 @@ jobs:
     timeout-minutes: 10
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: pre-push
         run: |
           sudo apt-get update
@@ -30,7 +37,7 @@ jobs:
     runs-on: ubuntu-latest
     container: centos:7
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: pre-push
         run: |
           # NB: no working flake8
@@ -43,7 +50,7 @@ jobs:
     runs-on: ubuntu-latest
     container: fedora:35
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: pre-push
         run: |
           dnf -y install --releasever=35 \
@@ -56,7 +63,7 @@ jobs:
     runs-on: ubuntu-20.04
     container: debian:11
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: pre-push
         run: |
           apt-get update
@@ -69,7 +76,7 @@ jobs:
     runs-on: ubuntu-22.04
     container: debian:12
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: pre-push
         run: |
           apt-get update
@@ -81,6 +88,6 @@ jobs:
     runs-on: ubuntu-latest
     container: vlajos/misspell-fixer
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: run misspell-fixer
         run: /misspell-fixer/misspell-fixer -sv .