diff --git a/.github/workflows/_build-native-meta.yml b/.github/workflows/_build-native-meta.yml
index 0227c6bcc..e33ff632e 100644
--- a/.github/workflows/_build-native-meta.yml
+++ b/.github/workflows/_build-native-meta.yml
@@ -42,7 +42,7 @@ jobs:
       fail-fast: true
     steps:
     - name: Checkout Repository
-      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4.1.7
+      uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4.2.0
     - name: Set up JDK
       uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v4.4.0
       with:
@@ -109,7 +109,7 @@ jobs:
     - build-native-image
     steps:
     - name: Checkout Repository
-      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4.1.7
+      uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4.2.0
     - name: Download amd64 Binary
       uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # tag=v4.1.8
       with:
diff --git a/.github/workflows/buf.yml b/.github/workflows/buf.yml
index 669946b42..9e62d5447 100644
--- a/.github/workflows/buf.yml
+++ b/.github/workflows/buf.yml
@@ -31,7 +31,7 @@ jobs:
     timeout-minutes: 5
     steps:
     - name: Checkout Repository
-      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4.1.7
+      uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4.2.0
     - name: Setup buf
       uses: bufbuild/buf-setup-action@a8b4a18369a5feb07d4bf9cb2b24f81d105d7bab # tag=v1.42.0
       with:
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f177db657..512c6cd5c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -38,7 +38,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4.1.7
+    - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4.2.0
     - name: Set up JDK
       uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v4.4.0
       with:
@@ -90,7 +90,7 @@ jobs:
       fail-fast: true
     steps:
     - name: Checkout Repository
-      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4.1.7
+      uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4.2.0
     - name: Set up JDK
       uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v4.4.0
       with:
diff --git a/.github/workflows/deploy-docs.yml b/.github/workflows/deploy-docs.yml
index 2180a187e..95b47eb13 100644
--- a/.github/workflows/deploy-docs.yml
+++ b/.github/workflows/deploy-docs.yml
@@ -37,7 +37,7 @@ jobs:
       contents: write # Required to create releases
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4.2.0
         with:
           fetch-depth: 0
       - name: Setup Python
diff --git a/.github/workflows/e2e-test.yml b/.github/workflows/e2e-test.yml
index 5eff3dfde..2a306dce7 100644
--- a/.github/workflows/e2e-test.yml
+++ b/.github/workflows/e2e-test.yml
@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4.1.7
+    - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4.2.0
     - name: Set up JDK
       uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v4.4.0
       with:
diff --git a/.github/workflows/publishJar.yml b/.github/workflows/publishJar.yml
index 54a7c0739..7b51d37ae 100644
--- a/.github/workflows/publishJar.yml
+++ b/.github/workflows/publishJar.yml
@@ -33,7 +33,7 @@ jobs:
       packages: write # Required to push images to ghcr.io
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4.2.0
       - name: Set up JDK
         uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v4.4.0
         with:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 125131b95..2d5b8a29d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -32,7 +32,7 @@ jobs:
     if: "${{ github.repository_owner == 'DependencyTrack' }}"
     steps:
     - name: Checkout Repository
-      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4.1.7
+      uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4.2.0
       with:
         persist-credentials: false
     - name: Set up JDK
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
index 2aa005743..8b262f0c6 100644
--- a/.github/workflows/semgrep.yml
+++ b/.github/workflows/semgrep.yml
@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # Checkout project source
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4.2.0
 
       # Scan code using project's configuration on https://semgrep.dev/manage
       - uses: returntocorp/semgrep-action@713efdd345f3035192eaa63f56867b88e63e4e5d # tag=v1
diff --git a/.github/workflows/update-config-docs.yml b/.github/workflows/update-config-docs.yml
index 6d58ec101..7a8ecf32c 100644
--- a/.github/workflows/update-config-docs.yml
+++ b/.github/workflows/update-config-docs.yml
@@ -39,9 +39,9 @@ jobs:
     if: "${{ github.repository_owner == 'DependencyTrack' }}"
     steps:
     - name: Checkout Repository
-      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4.1.7
+      uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4.2.0
     - name: Checkout API Server Repository
-      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4.1.7
+      uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4.2.0
       with:
         repository: DependencyTrack/hyades-apiserver
         path: hyades-apiserver
diff --git a/.github/workflows/update-proto-docs.yml b/.github/workflows/update-proto-docs.yml
index 8cbc605f3..0224cbd85 100644
--- a/.github/workflows/update-proto-docs.yml
+++ b/.github/workflows/update-proto-docs.yml
@@ -38,7 +38,7 @@ jobs:
     if: "${{ github.repository_owner == 'DependencyTrack' }}"
     steps:
     - name: Checkout Repository
-      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4.1.7
+      uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4.2.0
     - name: Generate Proto Documentation
       run: ./scripts/gen-proto-docs.sh
     - name: Create Pull Request