diff --git a/docs/usage/user-stories/maintaining-aur-packages-with-renovate.md b/docs/usage/user-stories/maintaining-aur-packages-with-renovate.md
index 9c3902bc18a4193619a27997abadfa84f6563818..7afba9a4904966e9ecf8f61567afae729a58e707 100644
--- a/docs/usage/user-stories/maintaining-aur-packages-with-renovate.md
+++ b/docs/usage/user-stories/maintaining-aur-packages-with-renovate.md
@@ -101,7 +101,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
         with:
           fetch-depth: 0
           ref: ${{ github.ref }}
diff --git a/lib/modules/manager/github-actions/readme.md b/lib/modules/manager/github-actions/readme.md
index 6b5b13219be1ce5232b41c58b0608fd55479a423..be99cb2597fb2211852a7a28ad67177e7ae96f8d 100644
--- a/lib/modules/manager/github-actions/readme.md
+++ b/lib/modules/manager/github-actions/readme.md
@@ -12,7 +12,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@af513c7a016048ae468971c52ed77d9562c7c819 # v1.0.0
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
 ```
 
 Renovate will update the commit SHA but follow the GitHub tag you specified.