diff --git a/.github/workflows/aarch64.yml b/.github/workflows/aarch64.yml
index a2751aed6..3b97a5fd3 100644
--- a/.github/workflows/aarch64.yml
+++ b/.github/workflows/aarch64.yml
@@ -24,7 +24,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - uses: uraimo/run-on-arch-action@b0ffb25eb00af00468375982384441f063da1741 # v2.7.2
         name: Build and Test
         id: runcmd
diff --git a/.github/workflows/alpine.yml b/.github/workflows/alpine.yml
index 058b74e3e..5aba4ad04 100644
--- a/.github/workflows/alpine.yml
+++ b/.github/workflows/alpine.yml
@@ -24,7 +24,7 @@ jobs:
   ubuntu-build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - name: start docker
         run: |
           docker run -w /src -dit --name alpine -v $PWD:/src alpine:latest
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index a993f2940..ade926653 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -28,7 +28,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 2c56af54d..d8356a5e8 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -10,6 +10,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: 'Checkout Repository'
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - name: 'Dependency Review'
         uses: actions/dependency-review-action@5a2ce3f5b92ee19cbb1541a4984c76d921601d7c # v4.3.4
diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml
index 87458661e..18c3b7df1 100644
--- a/.github/workflows/documentation.yml
+++ b/.github/workflows/documentation.yml
@@ -22,7 +22,7 @@ jobs:
       id-token: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - name: Install theme
         run: ./tools/prepare-doxygen.sh
       - uses: mattnotmitt/doxygen-action@e0c8cd4cd05e28b88e723b25b30188ecf2505b40 # edge
diff --git a/.github/workflows/emscripten.yml b/.github/workflows/emscripten.yml
index 92471dfee..038efee9d 100644
--- a/.github/workflows/emscripten.yml
+++ b/.github/workflows/emscripten.yml
@@ -24,13 +24,13 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3
       - uses: mymindstorm/setup-emsdk@6ab9eb1bda2574c4ddb79809fc9247783eaf9021 # v14
       - name: Verify
         run: emcc -v
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v3.6.0
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v3.6.0
       - name: Configure
         run: emcmake cmake -B buildwasm -D ADA_TOOLS=OFF
       - name: Build
diff --git a/.github/workflows/lint_and_format_check.yml b/.github/workflows/lint_and_format_check.yml
index 7077ec1f6..6affa5971 100644
--- a/.github/workflows/lint_and_format_check.yml
+++ b/.github/workflows/lint_and_format_check.yml
@@ -24,7 +24,7 @@ jobs:
   lint-and-format:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       - name: Run clang-format
         uses: jidicula/clang-format-action@c74383674bf5f7c69f60ce562019c1c94bc1421a # v4.13.0
diff --git a/.github/workflows/macos_install.yml b/.github/workflows/macos_install.yml
index 76199e791..9524f88e8 100644
--- a/.github/workflows/macos_install.yml
+++ b/.github/workflows/macos_install.yml
@@ -28,7 +28,7 @@ jobs:
         include:
           shared: [ON, OFF]
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - name: Prepare
         run: cmake -DBUILD_SHARED_LIBS=${{matrix.shared}} -DCMAKE_INSTALL_PREFIX:PATH=destination -B build
       - name: Build
diff --git a/.github/workflows/release-script-tests.yml b/.github/workflows/release-script-tests.yml
index 11279fa0c..254af29a7 100644
--- a/.github/workflows/release-script-tests.yml
+++ b/.github/workflows/release-script-tests.yml
@@ -26,7 +26,7 @@ jobs:
         working-directory: ./tools/release
 
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       - name: Prepare Python
         uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
diff --git a/.github/workflows/release_create.yml b/.github/workflows/release_create.yml
index f5b873209..f8b8cf9df 100644
--- a/.github/workflows/release_create.yml
+++ b/.github/workflows/release_create.yml
@@ -36,7 +36,7 @@ jobs:
       NEXT_RELEASE_TAG: ${{ github.event.pull_request.head.ref }}
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       - name: Prepare Python
         uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
diff --git a/.github/workflows/release_prepare.yml b/.github/workflows/release_prepare.yml
index 3e9fc6a9f..363c95874 100644
--- a/.github/workflows/release_prepare.yml
+++ b/.github/workflows/release_prepare.yml
@@ -26,7 +26,7 @@ jobs:
     env:
       CXX: clang++-14
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       - name: Prepare Python
         uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 39433ad6e..1cc8cc8bf 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -30,7 +30,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/ubuntu-release.yml b/.github/workflows/ubuntu-release.yml
index 7e835d47e..1408ffc27 100644
--- a/.github/workflows/ubuntu-release.yml
+++ b/.github/workflows/ubuntu-release.yml
@@ -27,7 +27,7 @@ jobs:
       matrix:
         cxx: [g++-12, clang++-14]
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - name: Setup Ninja
         run: sudo apt-get install ninja-build
       - name: Prepare
diff --git a/.github/workflows/ubuntu-s390x.yml b/.github/workflows/ubuntu-s390x.yml
index 2c1a32506..4f9d6feae 100644
--- a/.github/workflows/ubuntu-s390x.yml
+++ b/.github/workflows/ubuntu-s390x.yml
@@ -24,7 +24,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - uses: uraimo/run-on-arch-action@b0ffb25eb00af00468375982384441f063da1741 # v2.7.2
         name: Test
         id: runcmd
diff --git a/.github/workflows/ubuntu-sanitized.yml b/.github/workflows/ubuntu-sanitized.yml
index 724a64593..512d87065 100644
--- a/.github/workflows/ubuntu-sanitized.yml
+++ b/.github/workflows/ubuntu-sanitized.yml
@@ -27,7 +27,7 @@ jobs:
       matrix:
         shared: [ON, OFF]
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - name: Setup Ninja
         run: sudo apt-get install ninja-build
       - name: Prepare
diff --git a/.github/workflows/ubuntu-undef.yml b/.github/workflows/ubuntu-undef.yml
index 66c472116..977965268 100644
--- a/.github/workflows/ubuntu-undef.yml
+++ b/.github/workflows/ubuntu-undef.yml
@@ -27,7 +27,7 @@ jobs:
       matrix:
         shared: [ON, OFF]
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - name: Setup Ninja
         run: sudo apt-get install ninja-build
       - name: Prepare
diff --git a/.github/workflows/ubuntu.yml b/.github/workflows/ubuntu.yml
index 1bfa8adc0..15590650e 100644
--- a/.github/workflows/ubuntu.yml
+++ b/.github/workflows/ubuntu.yml
@@ -28,7 +28,7 @@ jobs:
         shared: [ON, OFF]
         cxx: [g++-12, clang++-14]
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - name: Setup Ninja
         run: sudo apt-get install ninja-build
       - name: Prepare
diff --git a/.github/workflows/ubuntu_install.yml b/.github/workflows/ubuntu_install.yml
index a955babba..abbf0bd90 100644
--- a/.github/workflows/ubuntu_install.yml
+++ b/.github/workflows/ubuntu_install.yml
@@ -28,7 +28,7 @@ jobs:
         include:
           shared: [ON, OFF]
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - name: Setup Ninja
         run: sudo apt-get install ninja-build
       - name: Prepare
diff --git a/.github/workflows/ubuntu_pedantic.yml b/.github/workflows/ubuntu_pedantic.yml
index 48c68b459..a475be7f3 100644
--- a/.github/workflows/ubuntu_pedantic.yml
+++ b/.github/workflows/ubuntu_pedantic.yml
@@ -27,7 +27,7 @@ jobs:
       matrix:
         shared: [ON, OFF]
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - name: Setup Ninja
         run: sudo apt-get install ninja-build
       - name: Prepare
diff --git a/.github/workflows/visual_studio.yml b/.github/workflows/visual_studio.yml
index 76230d21c..592881291 100644
--- a/.github/workflows/visual_studio.yml
+++ b/.github/workflows/visual_studio.yml
@@ -34,7 +34,7 @@ jobs:
           - {gen: Visual Studio 17 2022, arch: Win32, devchecks: ON, shared: OFF, config: Debug}
           - {gen: Visual Studio 17 2022, arch: Win32, devchecks: ON, shared: ON, config: Debug}
     steps:
-    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+    - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
     - name: Configure
       run: |
         cmake -DADA_DEVELOPMENT_CHECKS="${{matrix.devchecks}}" -G "${{matrix.gen}}" -A ${{matrix.arch}} -DBUILD_SHARED_LIBS=${{matrix.shared}} -B build
diff --git a/.github/workflows/visual_studio_clang.yml b/.github/workflows/visual_studio_clang.yml
index 349bc8c33..655faa717 100644
--- a/.github/workflows/visual_studio_clang.yml
+++ b/.github/workflows/visual_studio_clang.yml
@@ -30,7 +30,7 @@ jobs:
         include:
           - {gen: Visual Studio 17 2022, arch: x64, devchecks: ON}
     steps:
-    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+    - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
     - name: Configure
       run: |
         cmake -DADA_DEVELOPMENT_CHECKS="${{matrix.devchecks}}" -G "${{matrix.gen}}" -A ${{matrix.arch}} -T ClangCL -B build
diff --git a/.github/workflows/wpt-updater.yml b/.github/workflows/wpt-updater.yml
index 103fd1719..6770d2b7c 100644
--- a/.github/workflows/wpt-updater.yml
+++ b/.github/workflows/wpt-updater.yml
@@ -21,7 +21,7 @@ jobs:
       contents: write
       pull-requests: write
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - name: Fetch tests
         run: tools/update-wpt.sh
       - name: Open pull request