diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml
index 7924ce8..7df9263 100644
--- a/.github/workflows/renovate.yaml
+++ b/.github/workflows/renovate.yaml
@@ -47,7 +47,7 @@ jobs:
           private_key: ${{ secrets.RENOVATE_APP_PEM }}
 
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Detect config
         id: config
@@ -107,7 +107,7 @@ jobs:
 
       - name: Inspect configuration on default branch
         if: inputs.dry_run_branch != ''
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           path: default_branch
           ref: ${{ github.event.repository.default_branch }}