diff --git a/.github/workflows/akamai-base.yml b/.github/workflows/akamai-base.yml
index b854de9532..0403c9bc56 100644
--- a/.github/workflows/akamai-base.yml
+++ b/.github/workflows/akamai-base.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-akamai:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
       - id: shared
         name: Shared CI Steps
diff --git a/.github/workflows/akamai-edgekv.yml b/.github/workflows/akamai-edgekv.yml
index 3c534fa8de..217bcdf78d 100644
--- a/.github/workflows/akamai-edgekv.yml
+++ b/.github/workflows/akamai-edgekv.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-akamai-edgekv:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
       - id: shared
         name: Shared CI Steps
diff --git a/.github/workflows/akamai-edgeworker-sdk.yml b/.github/workflows/akamai-edgeworker-sdk.yml
index f1d05e3d92..caaf3acfd7 100644
--- a/.github/workflows/akamai-edgeworker-sdk.yml
+++ b/.github/workflows/akamai-edgeworker-sdk.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-akamai-edgeworker-sdk:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: 24.x
diff --git a/.github/workflows/browser-telemetry.yml b/.github/workflows/browser-telemetry.yml
index bf9a76eaf8..0620875abc 100644
--- a/.github/workflows/browser-telemetry.yml
+++ b/.github/workflows/browser-telemetry.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-browser-telemetry:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: 24.x
diff --git a/.github/workflows/browser.yml b/.github/workflows/browser.yml
index 8e9de4bdbc..c5348ee5d5 100644
--- a/.github/workflows/browser.yml
+++ b/.github/workflows/browser.yml
@@ -22,7 +22,7 @@ jobs:
         version: [18, 21]
 
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: ${{ matrix.version }}
diff --git a/.github/workflows/cloudflare.yml b/.github/workflows/cloudflare.yml
index 7b3aa60c80..e2dfc59854 100644
--- a/.github/workflows/cloudflare.yml
+++ b/.github/workflows/cloudflare.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-cloudflare:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
       - id: shared
         name: Shared CI Steps
diff --git a/.github/workflows/combined-browser.yml b/.github/workflows/combined-browser.yml
index c6fe4fe408..602562887c 100644
--- a/.github/workflows/combined-browser.yml
+++ b/.github/workflows/combined-browser.yml
@@ -22,7 +22,7 @@ jobs:
         version: [18, 21]
 
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: ${{ matrix.version }}
diff --git a/.github/workflows/common.yml b/.github/workflows/common.yml
index 70a51c9a5f..853366c014 100644
--- a/.github/workflows/common.yml
+++ b/.github/workflows/common.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-common:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: 24.x
diff --git a/.github/workflows/dependency-scan.yml b/.github/workflows/dependency-scan.yml
index 5c2ac50c18..2a0e99643d 100644
--- a/.github/workflows/dependency-scan.yml
+++ b/.github/workflows/dependency-scan.yml
@@ -10,7 +10,7 @@ jobs:
   generate-nodejs-sbom:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Generate SBOM
         uses: launchdarkly/gh-actions/actions/dependency-scan/generate-sbom@main
@@ -22,7 +22,7 @@ jobs:
     needs:
       - generate-nodejs-sbom
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Evaluate SBOM Policy
         uses: launchdarkly/gh-actions/actions/dependency-scan/evaluate-policy@main
diff --git a/.github/workflows/fastly.yml b/.github/workflows/fastly.yml
index 955eb5843e..20a6bcf30f 100644
--- a/.github/workflows/fastly.yml
+++ b/.github/workflows/fastly.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-fastly:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
       - id: shared
         name: Shared CI Steps
diff --git a/.github/workflows/jest.yml b/.github/workflows/jest.yml
index 07187b639c..1f12da1867 100644
--- a/.github/workflows/jest.yml
+++ b/.github/workflows/jest.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-jest:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
       - id: shared
         name: Shared CI Steps
diff --git a/.github/workflows/manual-publish-docs.yml b/.github/workflows/manual-publish-docs.yml
index 6fca01356a..2c70d40cd3 100644
--- a/.github/workflows/manual-publish-docs.yml
+++ b/.github/workflows/manual-publish-docs.yml
@@ -30,7 +30,7 @@ jobs:
   build-publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: 24.x
diff --git a/.github/workflows/node-dynamodb.yml b/.github/workflows/node-dynamodb.yml
index 20b9143597..3fe7c67662 100644
--- a/.github/workflows/node-dynamodb.yml
+++ b/.github/workflows/node-dynamodb.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-node-dynamo:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: 24.x
diff --git a/.github/workflows/node-otel.yml b/.github/workflows/node-otel.yml
index 9cfbf22ef5..3b6d6c72d3 100644
--- a/.github/workflows/node-otel.yml
+++ b/.github/workflows/node-otel.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-node-server-otel:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: 24.x
diff --git a/.github/workflows/node-redis.yml b/.github/workflows/node-redis.yml
index 90469680e1..c4d95d18dc 100644
--- a/.github/workflows/node-redis.yml
+++ b/.github/workflows/node-redis.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-node-redis:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: 24.x
diff --git a/.github/workflows/react-native-detox.yml b/.github/workflows/react-native-detox.yml
index 62aab5bb00..e04bb68250 100644
--- a/.github/workflows/react-native-detox.yml
+++ b/.github/workflows/react-native-detox.yml
@@ -27,7 +27,7 @@ jobs:
       run:
         working-directory: packages/sdk/react-native/example
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Setup Node.js
         uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
diff --git a/.github/workflows/react-native.yml b/.github/workflows/react-native.yml
index 8902b05b39..6f1780ed94 100644
--- a/.github/workflows/react-native.yml
+++ b/.github/workflows/react-native.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-react-native:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
       - id: shared
         name: Shared CI Steps
diff --git a/.github/workflows/react-universal.yml b/.github/workflows/react-universal.yml
index 1439b993c8..07dee0cceb 100644
--- a/.github/workflows/react-universal.yml
+++ b/.github/workflows/react-universal.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-react-universal:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
       - id: shared
         name: Shared CI Steps
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 6086bf7c18..8bab666beb 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -116,7 +116,7 @@ jobs:
       contents: write
     if: ${{ needs.release-please.outputs.package-common-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-common
         name: Full release of packages/shared/common
         uses: ./actions/full-release
@@ -132,7 +132,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-sdk-client-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-sdk-client
         name: Full release of packages/shared/sdk-client
         uses: ./actions/full-release
@@ -148,7 +148,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-sdk-server-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-sdk-server
         name: Full release of packages/shared/sdk-server
         uses: ./actions/full-release
@@ -164,7 +164,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-sdk-server-edge-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-sdk-server-edge
         name: Full release of packages/shared/sdk-server-edge
         uses: ./actions/full-release
@@ -180,7 +180,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-akamai-edgeworker-sdk-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-akamai-edgeworker-sdk
         name: Full release of packages/shared/akamai-edgeworker-sdk
         uses: ./actions/full-release
@@ -196,7 +196,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-cloudflare-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-cloudflare
         name: Full release of packages/sdk/cloudflare
         uses: ./actions/full-release
@@ -212,7 +212,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-fastly-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-fastly
         name: Full release of packages/sdk/fastly
         uses: ./actions/full-release
@@ -228,7 +228,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-react-native-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-react-native
         name: Full release of packages/sdk/react-native
         uses: ./actions/full-release
@@ -244,7 +244,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-browser-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-browser
         name: Full release of packages/sdk/browser
         uses: ./actions/full-release
@@ -260,7 +260,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-server-node-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-server-node
         name: Full release of packages/sdk/server-node
         uses: ./actions/full-release
@@ -276,7 +276,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-vercel-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-vercel
         name: Full release of packages/sdk/vercel
         uses: ./actions/full-release
@@ -292,7 +292,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-akamai-base-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-akamai-base
         name: Full release of packages/sdk/akamai-base
         uses: ./actions/full-release
@@ -308,7 +308,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-akamai-edgekv-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-akamai-edgekv
         name: Full release of packages/sdk/akamai-edgekv
         uses: ./actions/full-release
@@ -324,7 +324,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-node-server-sdk-redis-release == 'true' }}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - run: |
           sudo apt-get update
           sudo apt-get install redis-server
@@ -344,7 +344,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-node-server-sdk-dynamodb-release == 'true' }}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - run: |
           sudo docker run -d -p 8000:8000 amazon/dynamodb-local
       - id: release-node-server-sdk-dynamodb
@@ -362,7 +362,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-node-server-sdk-otel-release == 'true' }}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-node-server-sdk-otel
         name: Full release of packages/telemetry/node-server-sdk-otel
         uses: ./actions/full-release
@@ -378,7 +378,7 @@ jobs:
       contents: write
     if: ${{ needs.release-please.outputs.package-tooling-jest-release == 'true' }}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-tooling-jest
         name: Full release of packages/tooling/jest
         uses: ./actions/full-release
@@ -394,7 +394,7 @@ jobs:
       contents: write
     if: false #${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-react-universal-release == 'true' }}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-react-universal-sdk
         name: Full release of packages/sdk/react-universal
         uses: ./actions/full-release
@@ -410,7 +410,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-server-ai-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-react-native
         name: Full release of packages/sdk/server-ai
         uses: ./actions/full-release
@@ -426,7 +426,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-browser-telemetry-released == 'true' }}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-browser-telemetry
         name: Full release of packages/telemetry/browser-telemetry
         uses: ./actions/full-release
@@ -442,7 +442,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-combined-browser-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-combined-browser
         name: Full release of packages/sdk/combined-browser
         uses: ./actions/full-release
@@ -458,7 +458,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-server-ai-langchain-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-server-ai-langchain
         name: Full release of packages/ai-providers/server-ai-langchain
         uses: ./actions/full-release
@@ -474,7 +474,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-server-ai-openai-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-server-ai-openai
         name: Full release of packages/ai-providers/server-ai-openai
         uses: ./actions/full-release
@@ -490,7 +490,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-server-ai-vercel-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-server-ai-vercel
         name: Full release of packages/ai-providers/server-ai-vercel
         uses: ./actions/full-release
@@ -506,7 +506,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-sdk-shopify-oxygen-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-shopify-oxygen
         name: Full release of packages/sdk/shopify-oxygen
         uses: ./actions/full-release
@@ -521,7 +521,7 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: ./actions/setup-release-node
 
       - name: 'Setup Redis'
diff --git a/.github/workflows/sdk-client.yml b/.github/workflows/sdk-client.yml
index 568b47decc..f3a0612908 100644
--- a/.github/workflows/sdk-client.yml
+++ b/.github/workflows/sdk-client.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-sdk-client:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
       - id: shared
         name: Shared CI Steps
diff --git a/.github/workflows/sdk-server-edge.yml b/.github/workflows/sdk-server-edge.yml
index 789efe521f..49f55debae 100644
--- a/.github/workflows/sdk-server-edge.yml
+++ b/.github/workflows/sdk-server-edge.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-sdk-server:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: 24.x
diff --git a/.github/workflows/sdk-server.yml b/.github/workflows/sdk-server.yml
index 60201f998c..2ae846b5b3 100644
--- a/.github/workflows/sdk-server.yml
+++ b/.github/workflows/sdk-server.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-sdk-server:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: 24.x
diff --git a/.github/workflows/server-ai-langchain.yml b/.github/workflows/server-ai-langchain.yml
index 8829947ff8..23b8dc6ac1 100644
--- a/.github/workflows/server-ai-langchain.yml
+++ b/.github/workflows/server-ai-langchain.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-langchain-provider:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1.0.1
       - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
         with:
           node-version: 24.x
diff --git a/.github/workflows/server-ai-openai.yml b/.github/workflows/server-ai-openai.yml
index 4e057363dc..0df7807b04 100644
--- a/.github/workflows/server-ai-openai.yml
+++ b/.github/workflows/server-ai-openai.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-openai-provider:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1.0.1
       - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
         with:
           node-version: 24.x
diff --git a/.github/workflows/server-ai-vercel.yml b/.github/workflows/server-ai-vercel.yml
index 984daf8c3b..0c8f3e5a6d 100644
--- a/.github/workflows/server-ai-vercel.yml
+++ b/.github/workflows/server-ai-vercel.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-vercel-provider:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1.0.1
       - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
         with:
           node-version: 24.x
diff --git a/.github/workflows/server-ai.yml b/.github/workflows/server-ai.yml
index aef8c66043..176da8e2fe 100644
--- a/.github/workflows/server-ai.yml
+++ b/.github/workflows/server-ai.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-server-sdk-ai:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: 24.x
diff --git a/.github/workflows/server-node.yml b/.github/workflows/server-node.yml
index 683a4cba8e..78f4220c64 100644
--- a/.github/workflows/server-node.yml
+++ b/.github/workflows/server-node.yml
@@ -20,7 +20,7 @@ jobs:
         version: [18, 22]
 
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: ${{ matrix.version }}
diff --git a/.github/workflows/shopify-oxygen.yml b/.github/workflows/shopify-oxygen.yml
index e4dfc26b93..6f48f54e84 100644
--- a/.github/workflows/shopify-oxygen.yml
+++ b/.github/workflows/shopify-oxygen.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-shopify-oxygen:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           # https://shopify.dev/docs/storefronts/headless/hydrogen/getting-started#requirements
diff --git a/.github/workflows/svelte.yml b/.github/workflows/svelte.yml
index f9692b97a7..72b99e6559 100644
--- a/.github/workflows/svelte.yml
+++ b/.github/workflows/svelte.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-svelte:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
       - id: shared
         name: Shared CI Steps
diff --git a/.github/workflows/vercel.yml b/.github/workflows/vercel.yml
index 66b2d9311b..423bb0256f 100644
--- a/.github/workflows/vercel.yml
+++ b/.github/workflows/vercel.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-vercel:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
       - id: shared
         name: Shared CI Steps
diff --git a/actions/publish-docs/action.yml b/actions/publish-docs/action.yml
index 7347f3dec8..35963f5cbe 100644
--- a/actions/publish-docs/action.yml
+++ b/actions/publish-docs/action.yml
@@ -9,7 +9,7 @@ runs:
   using: composite
   steps:
     # We put the github pages in another directory.
-    - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       with:
         path: gh-pages
         ref: gh-pages