diff --git a/.github/workflows/build-and-test-client.yml b/.github/workflows/build-and-test-client.yml
index 6a2378a..4d4db62 100644
--- a/.github/workflows/build-and-test-client.yml
+++ b/.github/workflows/build-and-test-client.yml
@@ -40,7 +40,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
 
       - name: Setup Go environment
         uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
@@ -93,7 +93,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
 
       - name: Setup Go environment
         uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
@@ -209,7 +209,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
 
       - name: Setup Node.js
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
diff --git a/.github/workflows/build-and-test-extension.yml b/.github/workflows/build-and-test-extension.yml
index bf3a208..ee49ef7 100644
--- a/.github/workflows/build-and-test-extension.yml
+++ b/.github/workflows/build-and-test-extension.yml
@@ -34,7 +34,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
 
       - name: Setup Node.js environment
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
diff --git a/.github/workflows/build-server.yml b/.github/workflows/build-server.yml
index d3c68b1..c9667be 100644
--- a/.github/workflows/build-server.yml
+++ b/.github/workflows/build-server.yml
@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: Build Server - Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
 
       - name: Build Server - Setup Node.js environment
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml
index 8cb971a..27a24ca 100644
--- a/.github/workflows/copilot-setup-steps.yml
+++ b/.github/workflows/copilot-setup-steps.yml
@@ -31,7 +31,7 @@ jobs:
 
     steps:
       - name: Copilot Setup - Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         ## TODO : fix and/or rework to avoid "token not provided" error when this workflow
         ## is initiated purely for use by Copilot Coding Agent (CCA) (i.e. not triggered
         ## by normal code change). Uncomment the `with` section or refactor approach.
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 35475da..04858ec 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
 
       - name: Dependency Review
         uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v4
diff --git a/.github/workflows/lint-and-format.yml b/.github/workflows/lint-and-format.yml
index 9f66933..07b4f3b 100644
--- a/.github/workflows/lint-and-format.yml
+++ b/.github/workflows/lint-and-format.yml
@@ -16,7 +16,7 @@ jobs:
 
     steps:
       - name: Lint and Format - Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
 
       - name: Lint and Format - Setup Node.js
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
diff --git a/.github/workflows/query-unit-tests-swift.yml b/.github/workflows/query-unit-tests-swift.yml
index 9516f76..05aa4e0 100644
--- a/.github/workflows/query-unit-tests-swift.yml
+++ b/.github/workflows/query-unit-tests-swift.yml
@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: Query Unit Tests - swift - Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
 
       - name: Query Unit Tests - swift - Setup Node.js
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
diff --git a/.github/workflows/query-unit-tests.yml b/.github/workflows/query-unit-tests.yml
index 68b76f2..065c019 100644
--- a/.github/workflows/query-unit-tests.yml
+++ b/.github/workflows/query-unit-tests.yml
@@ -45,7 +45,7 @@ jobs:
 
     steps:
       - name: Query Unit Tests - ${{ matrix.language }} - Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
 
       - name: Query Unit Tests - ${{ matrix.language }} - Setup Node.js
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
diff --git a/.github/workflows/release-codeql.yml b/.github/workflows/release-codeql.yml
index 3d1e50f..b1bad03 100644
--- a/.github/workflows/release-codeql.yml
+++ b/.github/workflows/release-codeql.yml
@@ -62,7 +62,7 @@ jobs:
           echo "release_name=${RAW_VERSION#v}" >> "$GITHUB_OUTPUT"
 
       - name: CodeQL - Checkout tag
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
           ref: refs/tags/${{ steps.version.outputs.version }}
           persist-credentials: false
diff --git a/.github/workflows/release-npm.yml b/.github/workflows/release-npm.yml
index 2f3ae59..5353d99 100644
--- a/.github/workflows/release-npm.yml
+++ b/.github/workflows/release-npm.yml
@@ -59,7 +59,7 @@ jobs:
           echo "release_name=${RAW_VERSION#v}" >> "$GITHUB_OUTPUT"
 
       - name: npm - Checkout tag
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
           ref: refs/tags/${{ steps.version.outputs.version }}
           persist-credentials: false
diff --git a/.github/workflows/release-tag.yml b/.github/workflows/release-tag.yml
index dab543d..215a191 100644
--- a/.github/workflows/release-tag.yml
+++ b/.github/workflows/release-tag.yml
@@ -42,7 +42,7 @@ jobs:
 
     steps:
       - name: Tag - Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
           fetch-depth: 0
           fetch-tags: true
diff --git a/.github/workflows/release-vsix.yml b/.github/workflows/release-vsix.yml
index ac46128..bef0d8b 100644
--- a/.github/workflows/release-vsix.yml
+++ b/.github/workflows/release-vsix.yml
@@ -60,7 +60,7 @@ jobs:
           echo "release_name=${RAW_VERSION#v}" >> "$GITHUB_OUTPUT"
 
       - name: VSIX - Checkout tag
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
           ref: refs/tags/${{ steps.version.outputs.version }}
           persist-credentials: false
diff --git a/.github/workflows/update-codeql.yml b/.github/workflows/update-codeql.yml
index 90c6d50..9d2cb85 100644
--- a/.github/workflows/update-codeql.yml
+++ b/.github/workflows/update-codeql.yml
@@ -34,7 +34,7 @@ jobs:
 
     steps:
       - name: Detect - Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
 
       - name: Detect - Check latest CodeQL CLI version
         id: check-version
@@ -183,7 +183,7 @@ jobs:
 
     steps:
       - name: Update - Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
 
       - name: Update - Update .codeql-version
         run: |