diff --git a/.github/workflows/akamai-base.yml b/.github/workflows/akamai-base.yml
index b854de953..0403c9bc5 100644
--- a/.github/workflows/akamai-base.yml
+++ b/.github/workflows/akamai-base.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-akamai:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
       - id: shared
         name: Shared CI Steps
diff --git a/.github/workflows/akamai-edgekv.yml b/.github/workflows/akamai-edgekv.yml
index 3c534fa8d..217bcdf78 100644
--- a/.github/workflows/akamai-edgekv.yml
+++ b/.github/workflows/akamai-edgekv.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-akamai-edgekv:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
       - id: shared
         name: Shared CI Steps
diff --git a/.github/workflows/akamai-edgeworker-sdk.yml b/.github/workflows/akamai-edgeworker-sdk.yml
index f1d05e3d9..caaf3acfd 100644
--- a/.github/workflows/akamai-edgeworker-sdk.yml
+++ b/.github/workflows/akamai-edgeworker-sdk.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-akamai-edgeworker-sdk:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: 24.x
diff --git a/.github/workflows/browser-telemetry.yml b/.github/workflows/browser-telemetry.yml
index bf9a76eaf..0620875ab 100644
--- a/.github/workflows/browser-telemetry.yml
+++ b/.github/workflows/browser-telemetry.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-browser-telemetry:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: 24.x
diff --git a/.github/workflows/browser.yml b/.github/workflows/browser.yml
index 8e9de4bdb..c5348ee5d 100644
--- a/.github/workflows/browser.yml
+++ b/.github/workflows/browser.yml
@@ -22,7 +22,7 @@ jobs:
         version: [18, 21]
 
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: ${{ matrix.version }}
diff --git a/.github/workflows/cloudflare.yml b/.github/workflows/cloudflare.yml
index 7b3aa60c8..e2dfc5985 100644
--- a/.github/workflows/cloudflare.yml
+++ b/.github/workflows/cloudflare.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-cloudflare:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
       - id: shared
         name: Shared CI Steps
diff --git a/.github/workflows/combined-browser.yml b/.github/workflows/combined-browser.yml
index c6fe4fe40..602562887 100644
--- a/.github/workflows/combined-browser.yml
+++ b/.github/workflows/combined-browser.yml
@@ -22,7 +22,7 @@ jobs:
         version: [18, 21]
 
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: ${{ matrix.version }}
diff --git a/.github/workflows/common.yml b/.github/workflows/common.yml
index 70a51c9a5..853366c01 100644
--- a/.github/workflows/common.yml
+++ b/.github/workflows/common.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-common:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: 24.x
diff --git a/.github/workflows/dependency-scan.yml b/.github/workflows/dependency-scan.yml
index 5c2ac50c1..2a0e99643 100644
--- a/.github/workflows/dependency-scan.yml
+++ b/.github/workflows/dependency-scan.yml
@@ -10,7 +10,7 @@ jobs:
   generate-nodejs-sbom:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Generate SBOM
         uses: launchdarkly/gh-actions/actions/dependency-scan/generate-sbom@main
@@ -22,7 +22,7 @@ jobs:
     needs:
       - generate-nodejs-sbom
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Evaluate SBOM Policy
         uses: launchdarkly/gh-actions/actions/dependency-scan/evaluate-policy@main
diff --git a/.github/workflows/fastly.yml b/.github/workflows/fastly.yml
index 955eb5843..20a6bcf30 100644
--- a/.github/workflows/fastly.yml
+++ b/.github/workflows/fastly.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-fastly:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
       - id: shared
         name: Shared CI Steps
diff --git a/.github/workflows/jest.yml b/.github/workflows/jest.yml
index 07187b639..1f12da186 100644
--- a/.github/workflows/jest.yml
+++ b/.github/workflows/jest.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-jest:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
       - id: shared
         name: Shared CI Steps
diff --git a/.github/workflows/manual-publish-docs.yml b/.github/workflows/manual-publish-docs.yml
index 6fca01356..2c70d40cd 100644
--- a/.github/workflows/manual-publish-docs.yml
+++ b/.github/workflows/manual-publish-docs.yml
@@ -30,7 +30,7 @@ jobs:
   build-publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: 24.x
diff --git a/.github/workflows/node-dynamodb.yml b/.github/workflows/node-dynamodb.yml
index 20b914359..3fe7c6766 100644
--- a/.github/workflows/node-dynamodb.yml
+++ b/.github/workflows/node-dynamodb.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-node-dynamo:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: 24.x
diff --git a/.github/workflows/node-otel.yml b/.github/workflows/node-otel.yml
index 9cfbf22ef..3b6d6c72d 100644
--- a/.github/workflows/node-otel.yml
+++ b/.github/workflows/node-otel.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-node-server-otel:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: 24.x
diff --git a/.github/workflows/node-redis.yml b/.github/workflows/node-redis.yml
index 90469680e..c4d95d18d 100644
--- a/.github/workflows/node-redis.yml
+++ b/.github/workflows/node-redis.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-node-redis:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: 24.x
diff --git a/.github/workflows/react-native-detox.yml b/.github/workflows/react-native-detox.yml
index 62aab5bb0..e04bb6825 100644
--- a/.github/workflows/react-native-detox.yml
+++ b/.github/workflows/react-native-detox.yml
@@ -27,7 +27,7 @@ jobs:
       run:
         working-directory: packages/sdk/react-native/example
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Setup Node.js
         uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
diff --git a/.github/workflows/react-native.yml b/.github/workflows/react-native.yml
index 8902b05b3..6f1780ed9 100644
--- a/.github/workflows/react-native.yml
+++ b/.github/workflows/react-native.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-react-native:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
       - id: shared
         name: Shared CI Steps
diff --git a/.github/workflows/react-universal.yml b/.github/workflows/react-universal.yml
index 1439b993c..07dee0cce 100644
--- a/.github/workflows/react-universal.yml
+++ b/.github/workflows/react-universal.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-react-universal:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
       - id: shared
         name: Shared CI Steps
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 6086bf7c1..8bab666be 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -116,7 +116,7 @@ jobs:
       contents: write
     if: ${{ needs.release-please.outputs.package-common-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-common
         name: Full release of packages/shared/common
         uses: ./actions/full-release
@@ -132,7 +132,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-sdk-client-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-sdk-client
         name: Full release of packages/shared/sdk-client
         uses: ./actions/full-release
@@ -148,7 +148,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-sdk-server-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-sdk-server
         name: Full release of packages/shared/sdk-server
         uses: ./actions/full-release
@@ -164,7 +164,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-sdk-server-edge-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-sdk-server-edge
         name: Full release of packages/shared/sdk-server-edge
         uses: ./actions/full-release
@@ -180,7 +180,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-akamai-edgeworker-sdk-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-akamai-edgeworker-sdk
         name: Full release of packages/shared/akamai-edgeworker-sdk
         uses: ./actions/full-release
@@ -196,7 +196,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-cloudflare-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-cloudflare
         name: Full release of packages/sdk/cloudflare
         uses: ./actions/full-release
@@ -212,7 +212,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-fastly-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-fastly
         name: Full release of packages/sdk/fastly
         uses: ./actions/full-release
@@ -228,7 +228,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-react-native-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-react-native
         name: Full release of packages/sdk/react-native
         uses: ./actions/full-release
@@ -244,7 +244,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-browser-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-browser
         name: Full release of packages/sdk/browser
         uses: ./actions/full-release
@@ -260,7 +260,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-server-node-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-server-node
         name: Full release of packages/sdk/server-node
         uses: ./actions/full-release
@@ -276,7 +276,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-vercel-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-vercel
         name: Full release of packages/sdk/vercel
         uses: ./actions/full-release
@@ -292,7 +292,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-akamai-base-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-akamai-base
         name: Full release of packages/sdk/akamai-base
         uses: ./actions/full-release
@@ -308,7 +308,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-akamai-edgekv-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-akamai-edgekv
         name: Full release of packages/sdk/akamai-edgekv
         uses: ./actions/full-release
@@ -324,7 +324,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-node-server-sdk-redis-release == 'true' }}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - run: |
           sudo apt-get update
           sudo apt-get install redis-server
@@ -344,7 +344,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-node-server-sdk-dynamodb-release == 'true' }}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - run: |
           sudo docker run -d -p 8000:8000 amazon/dynamodb-local
       - id: release-node-server-sdk-dynamodb
@@ -362,7 +362,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-node-server-sdk-otel-release == 'true' }}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-node-server-sdk-otel
         name: Full release of packages/telemetry/node-server-sdk-otel
         uses: ./actions/full-release
@@ -378,7 +378,7 @@ jobs:
       contents: write
     if: ${{ needs.release-please.outputs.package-tooling-jest-release == 'true' }}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-tooling-jest
         name: Full release of packages/tooling/jest
         uses: ./actions/full-release
@@ -394,7 +394,7 @@ jobs:
       contents: write
     if: false #${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-react-universal-release == 'true' }}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-react-universal-sdk
         name: Full release of packages/sdk/react-universal
         uses: ./actions/full-release
@@ -410,7 +410,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-server-ai-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-react-native
         name: Full release of packages/sdk/server-ai
         uses: ./actions/full-release
@@ -426,7 +426,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-browser-telemetry-released == 'true' }}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-browser-telemetry
         name: Full release of packages/telemetry/browser-telemetry
         uses: ./actions/full-release
@@ -442,7 +442,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-combined-browser-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-combined-browser
         name: Full release of packages/sdk/combined-browser
         uses: ./actions/full-release
@@ -458,7 +458,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-server-ai-langchain-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-server-ai-langchain
         name: Full release of packages/ai-providers/server-ai-langchain
         uses: ./actions/full-release
@@ -474,7 +474,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-server-ai-openai-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-server-ai-openai
         name: Full release of packages/ai-providers/server-ai-openai
         uses: ./actions/full-release
@@ -490,7 +490,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-server-ai-vercel-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-server-ai-vercel
         name: Full release of packages/ai-providers/server-ai-vercel
         uses: ./actions/full-release
@@ -506,7 +506,7 @@ jobs:
       contents: write
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-sdk-shopify-oxygen-released == 'true'}}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - id: release-shopify-oxygen
         name: Full release of packages/sdk/shopify-oxygen
         uses: ./actions/full-release
@@ -521,7 +521,7 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: ./actions/setup-release-node
 
       - name: 'Setup Redis'
diff --git a/.github/workflows/sdk-client.yml b/.github/workflows/sdk-client.yml
index 568b47dec..f3a061290 100644
--- a/.github/workflows/sdk-client.yml
+++ b/.github/workflows/sdk-client.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-sdk-client:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
       - id: shared
         name: Shared CI Steps
diff --git a/.github/workflows/sdk-server-edge.yml b/.github/workflows/sdk-server-edge.yml
index 789efe521..49f55deba 100644
--- a/.github/workflows/sdk-server-edge.yml
+++ b/.github/workflows/sdk-server-edge.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-sdk-server:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: 24.x
diff --git a/.github/workflows/sdk-server.yml b/.github/workflows/sdk-server.yml
index 60201f998..2ae846b5b 100644
--- a/.github/workflows/sdk-server.yml
+++ b/.github/workflows/sdk-server.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-sdk-server:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: 24.x
diff --git a/.github/workflows/server-ai-langchain.yml b/.github/workflows/server-ai-langchain.yml
index 8829947ff..23b8dc6ac 100644
--- a/.github/workflows/server-ai-langchain.yml
+++ b/.github/workflows/server-ai-langchain.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-langchain-provider:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1.0.1
       - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
         with:
           node-version: 24.x
diff --git a/.github/workflows/server-ai-openai.yml b/.github/workflows/server-ai-openai.yml
index 4e057363d..0df7807b0 100644
--- a/.github/workflows/server-ai-openai.yml
+++ b/.github/workflows/server-ai-openai.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-openai-provider:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1.0.1
       - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
         with:
           node-version: 24.x
diff --git a/.github/workflows/server-ai-vercel.yml b/.github/workflows/server-ai-vercel.yml
index 984daf8c3..0c8f3e5a6 100644
--- a/.github/workflows/server-ai-vercel.yml
+++ b/.github/workflows/server-ai-vercel.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-vercel-provider:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1.0.1
       - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
         with:
           node-version: 24.x
diff --git a/.github/workflows/server-ai.yml b/.github/workflows/server-ai.yml
index aef8c6604..176da8e2f 100644
--- a/.github/workflows/server-ai.yml
+++ b/.github/workflows/server-ai.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-server-sdk-ai:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: 24.x
diff --git a/.github/workflows/server-node.yml b/.github/workflows/server-node.yml
index 683a4cba8..78f4220c6 100644
--- a/.github/workflows/server-node.yml
+++ b/.github/workflows/server-node.yml
@@ -20,7 +20,7 @@ jobs:
         version: [18, 22]
 
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: ${{ matrix.version }}
diff --git a/.github/workflows/shopify-oxygen.yml b/.github/workflows/shopify-oxygen.yml
index e4dfc26b9..6f48f54e8 100644
--- a/.github/workflows/shopify-oxygen.yml
+++ b/.github/workflows/shopify-oxygen.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-shopify-oxygen:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           # https://shopify.dev/docs/storefronts/headless/hydrogen/getting-started#requirements
diff --git a/.github/workflows/svelte.yml b/.github/workflows/svelte.yml
index f9692b97a..72b99e655 100644
--- a/.github/workflows/svelte.yml
+++ b/.github/workflows/svelte.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-svelte:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
       - id: shared
         name: Shared CI Steps
diff --git a/.github/workflows/vercel.yml b/.github/workflows/vercel.yml
index 66b2d9311..423bb0256 100644
--- a/.github/workflows/vercel.yml
+++ b/.github/workflows/vercel.yml
@@ -14,7 +14,7 @@ jobs:
   build-test-vercel:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
       - id: shared
         name: Shared CI Steps
diff --git a/actions/publish-docs/action.yml b/actions/publish-docs/action.yml
index 7347f3dec..35963f5cb 100644
--- a/actions/publish-docs/action.yml
+++ b/actions/publish-docs/action.yml
@@ -9,7 +9,7 @@ runs:
   using: composite
   steps:
     # We put the github pages in another directory.
-    - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       with:
         path: gh-pages
         ref: gh-pages