diff --git a/.github/workflows/deploy-docs.yml b/.github/workflows/deploy-docs.yml
index 0ffcffe71a..206652996f 100644
--- a/.github/workflows/deploy-docs.yml
+++ b/.github/workflows/deploy-docs.yml
@@ -26,7 +26,7 @@ jobs:
       REF_NAME: ${{ github.ref_name }}
 
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
       with:
         fetch-depth: 0
         persist-credentials: false
diff --git a/.github/workflows/pypi.yml b/.github/workflows/pypi.yml
index 0b8d0b98dc..5406adcf59 100644
--- a/.github/workflows/pypi.yml
+++ b/.github/workflows/pypi.yml
@@ -25,7 +25,7 @@ jobs:
       id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
 
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
       with:
         # Should be enough for setuptools-scm
         fetch-depth: 100
diff --git a/.github/workflows/save_versions.yml b/.github/workflows/save_versions.yml
index b5f9414a83..9bf7ba6818 100644
--- a/.github/workflows/save_versions.yml
+++ b/.github/workflows/save_versions.yml
@@ -17,7 +17,7 @@ jobs:
 
     steps:
     - name: Checkout Folium
-      uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
       with:
         fetch-depth: 0
         persist-credentials: false
diff --git a/.github/workflows/test_code.yml b/.github/workflows/test_code.yml
index 1374e6928b..9fa879c9fe 100644
--- a/.github/workflows/test_code.yml
+++ b/.github/workflows/test_code.yml
@@ -27,7 +27,7 @@ jobs:
         shell: bash -l {0}
 
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
       with:
         fetch-depth: 0
         persist-credentials: false
diff --git a/.github/workflows/test_geopandas.yml b/.github/workflows/test_geopandas.yml
index cb0b9d6dd6..178a8233f9 100644
--- a/.github/workflows/test_geopandas.yml
+++ b/.github/workflows/test_geopandas.yml
@@ -23,7 +23,7 @@ jobs:
 
     steps:
     - name: Checkout Folium
-      uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
       with:
         fetch-depth: 0
         persist-credentials: false
@@ -38,7 +38,7 @@ jobs:
           --file folium/requirements.txt
 
     - name: Checkout Geopandas
-      uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
       with:
         fetch-depth: 0
         persist-credentials: false
diff --git a/.github/workflows/test_latest_branca.yml b/.github/workflows/test_latest_branca.yml
index c399c2d72f..26e92338c3 100644
--- a/.github/workflows/test_latest_branca.yml
+++ b/.github/workflows/test_latest_branca.yml
@@ -19,7 +19,7 @@ jobs:
         shell: bash -l {0}
 
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
       with:
         fetch-depth: 0
         persist-credentials: false
diff --git a/.github/workflows/test_mypy.yml b/.github/workflows/test_mypy.yml
index f4ab8f3f19..55f343c0db 100644
--- a/.github/workflows/test_mypy.yml
+++ b/.github/workflows/test_mypy.yml
@@ -20,7 +20,7 @@ jobs:
         shell: bash -l {0}
 
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
       with:
         fetch-depth: 0
         persist-credentials: false
diff --git a/.github/workflows/test_selenium.yml b/.github/workflows/test_selenium.yml
index 5f4e6ff7ec..36c4a966e2 100644
--- a/.github/workflows/test_selenium.yml
+++ b/.github/workflows/test_selenium.yml
@@ -25,7 +25,7 @@ jobs:
       actions: write
 
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
       with:
         fetch-depth: 0
         persist-credentials: false
diff --git a/.github/workflows/test_snapshots.yml b/.github/workflows/test_snapshots.yml
index 1bcfccfd9f..34fd605cae 100644
--- a/.github/workflows/test_snapshots.yml
+++ b/.github/workflows/test_snapshots.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
     - name: Checkout Folium
-      uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
       with:
         fetch-depth: 0
         persist-credentials: false
diff --git a/.github/workflows/test_streamlit_folium.yml b/.github/workflows/test_streamlit_folium.yml
index 50e1078612..180d350c1f 100644
--- a/.github/workflows/test_streamlit_folium.yml
+++ b/.github/workflows/test_streamlit_folium.yml
@@ -27,7 +27,7 @@ jobs:
         python-version: "3.14"
 
     - name: Checkout Folium
-      uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
       with:
         fetch-depth: 0
         persist-credentials: false
@@ -36,7 +36,7 @@ jobs:
       uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990  # v8.3.2
 
     - name: Checkout Streamlit Folium
-      uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
       with:
         fetch-depth: 0
         persist-credentials: false