diff --git a/.github/workflows/app-build-verify.yml b/.github/workflows/app-build-verify.yml
index 2aec7d28..ed789e20 100644
--- a/.github/workflows/app-build-verify.yml
+++ b/.github/workflows/app-build-verify.yml
@@ -87,13 +87,13 @@ jobs:
         echo "system-python-version=${SYSTEM_PYTHON_VER}" | tee -a ${GITHUB_OUTPUT}
 
     - name: Checkout ${{ inputs.repository }}
-      uses: actions/checkout@v4.1.3
+      uses: actions/checkout@v4.1.4
       with:
         repository: ${{ inputs.repository }}
         fetch-depth: 0
 
     - name: Checkout ${{ inputs.workflow-repo }}${{ inputs.workflow-repo-ref && format('@{0}', inputs.workflow-repo-ref) || '' }}
-      uses: actions/checkout@v4.1.3
+      uses: actions/checkout@v4.1.4
       with:
         repository: ${{ inputs.workflow-repo }}
         ref: ${{ inputs.workflow-repo-ref }}
diff --git a/.github/workflows/app-create-verify.yml b/.github/workflows/app-create-verify.yml
index a10854c4..3e84bd43 100644
--- a/.github/workflows/app-create-verify.yml
+++ b/.github/workflows/app-create-verify.yml
@@ -45,20 +45,20 @@ jobs:
     steps:
 
     - name: Checkout ${{ github.repository }}
-      uses: actions/checkout@v4.1.3
+      uses: actions/checkout@v4.1.4
       with:
         repository: ${{ github.repository }}
         fetch-depth: 0
 
     - name: Checkout ${{ inputs.workflow-repo }}${{ inputs.workflow-repo-ref && format('@{0}', inputs.workflow-repo-ref) || '' }}
-      uses: actions/checkout@v4.1.3
+      uses: actions/checkout@v4.1.4
       with:
         repository: ${{ inputs.workflow-repo }}
         ref: ${{ inputs.workflow-repo-ref }}
         path: beeware-.github
 
     - name: Checkout beeware/briefcase-template
-      uses: actions/checkout@v4.1.3
+      uses: actions/checkout@v4.1.4
       with:
         repository: beeware/briefcase-template
         path: briefcase-template
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 53f60591..2db38b93 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -105,7 +105,7 @@ jobs:
           expected: "main"
     steps:
     - name: Checkout beeware/.github
-      uses: actions/checkout@v4.1.3
+      uses: actions/checkout@v4.1.4
 
     - name: Set up Python
       uses: actions/setup-python@v5.1.0
diff --git a/.github/workflows/dep-version-bump.yml b/.github/workflows/dep-version-bump.yml
index 811f9e1b..b9db8f0c 100644
--- a/.github/workflows/dep-version-bump.yml
+++ b/.github/workflows/dep-version-bump.yml
@@ -51,13 +51,13 @@ jobs:
     timeout-minutes: 15
     steps:
       - name: Checkout ${{ github.repository }}
-        uses: actions/checkout@v4.1.3
+        uses: actions/checkout@v4.1.4
         with:
           token: ${{ secrets.BRUTUS_PAT_TOKEN }}
           path: "repo"
 
       - name: Checkout ${{ inputs.workflow-repo }}${{ inputs.workflow-repo-ref && format('@{0}', inputs.workflow-repo-ref) || '' }}
-        uses: actions/checkout@v4.1.3
+        uses: actions/checkout@v4.1.4
         with:
           repository: ${{ inputs.workflow-repo }}
           ref: ${{ inputs.workflow-repo-ref }}
diff --git a/.github/workflows/dependabot-changenote.yml b/.github/workflows/dependabot-changenote.yml
index 889d3ace..750ea035 100644
--- a/.github/workflows/dependabot-changenote.yml
+++ b/.github/workflows/dependabot-changenote.yml
@@ -18,7 +18,7 @@ jobs:
     steps:
 
       - name: Checkout
-        uses: actions/checkout@v4.1.3
+        uses: actions/checkout@v4.1.4
         with:
           fetch-depth: 1
           token: ${{ secrets.BRUTUS_PAT_TOKEN }}
diff --git a/.github/workflows/pre-commit-run.yml b/.github/workflows/pre-commit-run.yml
index 66132769..d36da9d1 100644
--- a/.github/workflows/pre-commit-run.yml
+++ b/.github/workflows/pre-commit-run.yml
@@ -36,7 +36,7 @@ jobs:
     steps:
 
     - name: Checkout
-      uses: actions/checkout@v4.1.3
+      uses: actions/checkout@v4.1.4
       with:
         repository: ${{ inputs.repository }}
 
diff --git a/.github/workflows/pre-commit-update.yml b/.github/workflows/pre-commit-update.yml
index 6e65ca33..81b0d642 100644
--- a/.github/workflows/pre-commit-update.yml
+++ b/.github/workflows/pre-commit-update.yml
@@ -43,7 +43,7 @@ jobs:
       hook-repos: ${{ steps.hooks.outputs.repos }}
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4.1.3
+        uses: actions/checkout@v4.1.4
 
       - name: Get Pre-commit Hooks
         id: hooks
@@ -62,7 +62,7 @@ jobs:
         hook-repo: ${{ fromJson(needs.pre-commit-hooks.outputs.hook-repos) }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4.1.3
+        uses: actions/checkout@v4.1.4
         with:
           fetch-depth: 1
           token: ${{ secrets.BRUTUS_PAT_TOKEN }}
diff --git a/.github/workflows/python-package-create.yml b/.github/workflows/python-package-create.yml
index 3450a192..e287a1f7 100644
--- a/.github/workflows/python-package-create.yml
+++ b/.github/workflows/python-package-create.yml
@@ -62,7 +62,7 @@ jobs:
         run: echo "name=$(basename '${{ inputs.repository }}')" >> ${GITHUB_OUTPUT}
 
       - name: Checkout
-        uses: actions/checkout@v4.1.3
+        uses: actions/checkout@v4.1.4
         with:
           repository: ${{ inputs.repository }}
           fetch-depth: 0  # Fetch all refs so setuptools_scm can generate the correct version number
diff --git a/.github/workflows/towncrier-run.yml b/.github/workflows/towncrier-run.yml
index 03cf8cad..9c21fb60 100644
--- a/.github/workflows/towncrier-run.yml
+++ b/.github/workflows/towncrier-run.yml
@@ -39,14 +39,14 @@ jobs:
     steps:
 
     - name: Checkout Default Branch
-      uses: actions/checkout@v4.1.3
+      uses: actions/checkout@v4.1.4
       with:
         repository: ${{ inputs.repository }}
         ref: ${{ github.event.repository.default_branch }}
         fetch-depth: 0
 
     - name: Checkout Current Branch
-      uses: actions/checkout@v4.1.3
+      uses: actions/checkout@v4.1.4
       with:
         repository: ${{ inputs.repository }}
         fetch-depth: 0