diff --git a/.github/workflows/agent-config-kit-tests.yml b/.github/workflows/agent-config-kit-tests.yml
index 8d7c6ba..6de84e6 100644
--- a/.github/workflows/agent-config-kit-tests.yml
+++ b/.github/workflows/agent-config-kit-tests.yml
@@ -23,7 +23,7 @@ jobs:
         working-directory: packages/agent-config-kit
 
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
         with:
diff --git a/.github/workflows/agent-kit-tests.yml b/.github/workflows/agent-kit-tests.yml
index 6a13719..a3ffee4 100644
--- a/.github/workflows/agent-kit-tests.yml
+++ b/.github/workflows/agent-kit-tests.yml
@@ -23,7 +23,7 @@ jobs:
         working-directory: packages/agent-kit
 
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
         with:
diff --git a/.github/workflows/publish-agent-config-kit.yml b/.github/workflows/publish-agent-config-kit.yml
index 29fefff..c01dfca 100644
--- a/.github/workflows/publish-agent-config-kit.yml
+++ b/.github/workflows/publish-agent-config-kit.yml
@@ -21,7 +21,7 @@ jobs:
       run:
         working-directory: packages/agent-config-kit
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           fetch-depth: 0
           fetch-tags: true
diff --git a/.github/workflows/publish-agent-kit.yml b/.github/workflows/publish-agent-kit.yml
index 65ca9eb..1744b9c 100644
--- a/.github/workflows/publish-agent-kit.yml
+++ b/.github/workflows/publish-agent-kit.yml
@@ -21,7 +21,7 @@ jobs:
       run:
         working-directory: packages/agent-kit
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           fetch-depth: 0
           fetch-tags: true
diff --git a/.github/workflows/publish-skills.yml b/.github/workflows/publish-skills.yml
index ab47724..056f9e3 100644
--- a/.github/workflows/publish-skills.yml
+++ b/.github/workflows/publish-skills.yml
@@ -13,7 +13,7 @@ jobs:
       contents: write
 
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Build skill ZIPs
         run: |
diff --git a/.github/workflows/publish-witan-code.yml b/.github/workflows/publish-witan-code.yml
index c29d495..2110f95 100644
--- a/.github/workflows/publish-witan-code.yml
+++ b/.github/workflows/publish-witan-code.yml
@@ -21,7 +21,7 @@ jobs:
       run:
         working-directory: mcp/servers/witan-code
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           fetch-depth: 0
           fetch-tags: true
diff --git a/.github/workflows/publish-witan-core.yml b/.github/workflows/publish-witan-core.yml
index 629ba6d..4589e9d 100644
--- a/.github/workflows/publish-witan-core.yml
+++ b/.github/workflows/publish-witan-core.yml
@@ -21,7 +21,7 @@ jobs:
       run:
         working-directory: packages/witan-core
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           fetch-depth: 0
           fetch-tags: true
diff --git a/.github/workflows/publish-witan.yml b/.github/workflows/publish-witan.yml
index e826b18..ef56046 100644
--- a/.github/workflows/publish-witan.yml
+++ b/.github/workflows/publish-witan.yml
@@ -21,7 +21,7 @@ jobs:
       run:
         working-directory: mcp/servers/witan
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           fetch-depth: 0
           fetch-tags: true
diff --git a/.github/workflows/witan-core-tests.yml b/.github/workflows/witan-core-tests.yml
index 1ab5f76..2745bce 100644
--- a/.github/workflows/witan-core-tests.yml
+++ b/.github/workflows/witan-core-tests.yml
@@ -23,7 +23,7 @@ jobs:
         working-directory: packages/witan-core
 
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
         with:
diff --git a/.github/workflows/witan-tests.yml b/.github/workflows/witan-tests.yml
index 3346738..7dc870a 100644
--- a/.github/workflows/witan-tests.yml
+++ b/.github/workflows/witan-tests.yml
@@ -25,7 +25,7 @@ jobs:
         working-directory: mcp/servers/witan
 
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
         with:
@@ -63,7 +63,7 @@ jobs:
         working-directory: mcp/servers/witan
 
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
         with:
@@ -100,7 +100,7 @@ jobs:
         working-directory: mcp/servers/witan-code
 
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
         with: