diff --git a/.github/workflows/build_wheels.yml b/.github/workflows/build_wheels.yml
index dba102e..d07911d 100644
--- a/.github/workflows/build_wheels.yml
+++ b/.github/workflows/build_wheels.yml
@@ -29,7 +29,7 @@ jobs:
             arch: x86_64
 
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           fetch-depth: 0
           persist-credentials: false
@@ -58,7 +58,7 @@ jobs:
     name: Make SDist
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
       with:
         fetch-depth: 0  # Optional, use if you use setuptools_scm
         persist-credentials: false
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 317d48d..40d9aa2 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -12,8 +12,8 @@ jobs:
         environment: [py311, py312, py313, py314]
 
     steps:
-      - uses: actions/checkout@v6
-      - uses: prefix-dev/setup-pixi@v0.9.5
+      - uses: actions/checkout@v6.0.2
+      - uses: prefix-dev/setup-pixi@v0.9.6
         with:
           # pixi-version: v0.22.0 don't want to hard code this!
           cache: true
@@ -29,8 +29,8 @@ jobs:
         environment: [py314, py314t]
 
     steps:
-      - uses: actions/checkout@v6
-      - uses: prefix-dev/setup-pixi@v0.9.5
+      - uses: actions/checkout@v6.0.2
+      - uses: prefix-dev/setup-pixi@v0.9.6
         with:
           cache: true
       - run: pixi run -e ${{ matrix.environment }} test_threading
diff --git a/.github/workflows/update_lockfile.yaml b/.github/workflows/update_lockfile.yaml
index f79b617..f33f757 100644
--- a/.github/workflows/update_lockfile.yaml
+++ b/.github/workflows/update_lockfile.yaml
@@ -18,8 +18,8 @@ jobs:
         environment: [py313]
 
     steps:
-      - uses: actions/checkout@v6
-      - uses: prefix-dev/setup-pixi@v0.9.5
+      - uses: actions/checkout@v6.0.2
+      - uses: prefix-dev/setup-pixi@v0.9.6
         with:
           cache: true
       - run: pixi update && pixi run -e ${{ matrix.environment }} test