diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 00b17213b4ed24db10298602596c5c40d8420922..84aa62f3064e140f1f28b8c26e1bdf1977739421 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -72,7 +72,7 @@ jobs:
           python --version
           echo "Yarn $(yarn --version)"
 
-      - uses: actions/checkout@v2.3.3
+      - uses: actions/checkout@v2.3.4
 
       - name: Cache Yarn packages
         id: yarn_cache_packages
@@ -137,7 +137,7 @@ jobs:
           echo "Node $(node --version)"
           echo "Yarn $(yarn --version)"
 
-      - uses: actions/checkout@v2.3.3
+      - uses: actions/checkout@v2.3.4
 
       - name: Cache Yarn packages
         id: yarn_cache_packages
@@ -189,7 +189,7 @@ jobs:
           npm config set scripts-prepend-node-path true
 
       # full checkout for semantic-release
-      - uses: actions/checkout@v2.3.3
+      - uses: actions/checkout@v2.3.4
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index f05443c99774df094a522c555c86de8016f3c901..971eb150de0a2251b8caa545f00b69ec2848b33a 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v2.3.3
+        uses: actions/checkout@v2.3.4
         with:
           # We must fetch at least the immediate parents so that if this is
           # a pull request then we can checkout the head.
diff --git a/.github/workflows/release-npm.yml b/.github/workflows/release-npm.yml
index c5b6e9035408780ba9fad689890ecb2e240155cc..1b762d0072bb6a72184f2499a6685beb4bb470e6 100644
--- a/.github/workflows/release-npm.yml
+++ b/.github/workflows/release-npm.yml
@@ -29,7 +29,7 @@ jobs:
           yarn config set version-git-tag false
           npm config set scripts-prepend-node-path true
 
-      - uses: actions/checkout@v2.3.3
+      - uses: actions/checkout@v2.3.4
         with:
           ref: ${{ github.event.client_payload.sha }}