diff --git a/.github/workflows/auto-release.yml b/.github/workflows/auto-release.yml
index 8f7d3536d6..224a525bb7 100644
--- a/.github/workflows/auto-release.yml
+++ b/.github/workflows/auto-release.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout master branch
-        uses: actions/checkout@v7.0.0
+        uses: actions/checkout@v7.0.1
         with:
           fetch-tags: true
           fetch-depth: "0"
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 0256710a17..c372fcf001 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -13,7 +13,7 @@ jobs:
   test_build:
     runs-on: ubuntu-latest-m
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
       - uses: actions/setup-go@v7
diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
index 83ffe871b7..c76bd4c5e8 100644
--- a/.github/workflows/checks.yml
+++ b/.github/workflows/checks.yml
@@ -18,7 +18,7 @@ jobs:
   precommit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
       - uses: actions/setup-go@v7
         with:
           go-version-file: "go.mod"
@@ -30,7 +30,7 @@ jobs:
     name: lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
       - uses: actions/setup-go@v7
         with:
           go-version-file: "go.mod"
diff --git a/.github/workflows/ci-dev.yml b/.github/workflows/ci-dev.yml
index 32476d702f..c00e87e57f 100644
--- a/.github/workflows/ci-dev.yml
+++ b/.github/workflows/ci-dev.yml
@@ -31,7 +31,7 @@ jobs:
         run: echo "$GITHUB_CONTEXT"
         env:
           GITHUB_CONTEXT: ${{ toJSON(github) }}
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
       - uses: actions/setup-go@v7
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0707f486be..9db723c03b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -12,7 +12,7 @@ jobs:
         os: [ ubuntu-latest, macos-latest, windows-latest ]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
       - uses: actions/setup-go@v7
         with:
           go-version-file: "go.mod"
diff --git a/.github/workflows/preflight.yml b/.github/workflows/preflight.yml
index 8e3f2080fc..407ac82294 100644
--- a/.github/workflows/preflight.yml
+++ b/.github/workflows/preflight.yml
@@ -32,7 +32,7 @@ jobs:
           - wireguard
           - misc
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
       - uses: actions/setup-go@v7
         with:
           go-version-file: 'go.mod'
diff --git a/.github/workflows/preflight_cleanup.yml b/.github/workflows/preflight_cleanup.yml
index 3f51a276c1..3973fbc64a 100644
--- a/.github/workflows/preflight_cleanup.yml
+++ b/.github/workflows/preflight_cleanup.yml
@@ -16,7 +16,7 @@ jobs:
     if: ${{ github.repository == 'superfly/flyctl' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
       - uses: actions/setup-go@v7
         with:
           go-version-file: "go.mod"
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index dd5a61e905..14c1fffbf7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -39,7 +39,7 @@ jobs:
       version: ${{ fromJSON(steps.gen.outputs.json).version }}
       tag: ${{ fromJSON(steps.gen.outputs.json).tag }}
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
           fetch-tags: true
@@ -69,7 +69,7 @@ jobs:
         GOOS: [linux, windows, darwin]
     runs-on: ubuntu-latest-m
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
       - uses: actions/setup-go@v7
@@ -109,7 +109,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: [meta, build]
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
       - uses: actions/setup-go@v7
diff --git a/.github/workflows/sync-docs.yml b/.github/workflows/sync-docs.yml
index 64e267d67e..f677848f36 100644
--- a/.github/workflows/sync-docs.yml
+++ b/.github/workflows/sync-docs.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout flyctl
-        uses: actions/checkout@v7.0.0
+        uses: actions/checkout@v7.0.1
       - uses: jnwng/github-app-installation-token-action@778da2ab509f3ef5e4b902bc15daf25ef3e34939
         id: installationToken
         with:
@@ -25,7 +25,7 @@ jobs:
           installationId: 37947271
           privateKey: ${{ secrets.DOCS_SYNCER_GITHUB_APP_PRIVATE_KEY }}
       - name: Checkout docs
-        uses: actions/checkout@v7.0.0
+        uses: actions/checkout@v7.0.1
         with:
           repository: superfly/docs
           token: ${{ steps.installationToken.outputs.token }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 97ef587b6e..72bdb3721d 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -14,7 +14,7 @@ jobs:
             target: "test"
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
       - uses: actions/setup-go@v7