diff --git a/.github/workflows/release-draft.yml b/.github/workflows/release-draft.yml
index c5c253d1..3f403b16 100644
--- a/.github/workflows/release-draft.yml
+++ b/.github/workflows/release-draft.yml
@@ -27,7 +27,7 @@ jobs:
     timeout-minutes: 15
     steps:
       - run: echo "Creating Linux draft release for tag ${{ inputs.tag_name }}"
-      - uses: actions/checkout@v4.2.0
+      - uses: actions/checkout@v4.2.2
         with:
           ref: ${{ inputs.tag_name }}
           fetch-depth: 0 # https://github.com/actions/checkout/issues/1471
@@ -94,7 +94,7 @@ jobs:
         with:
           node-version: 18
 
-      - uses: actions/checkout@v4.2.0
+      - uses: actions/checkout@v4.2.2
         with:
           ref: ${{ inputs.tag_name }}
           fetch-depth: 0 # https://github.com/actions/checkout/issues/1471
@@ -113,7 +113,7 @@ jobs:
       APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
     steps:
       - run: echo "Creating Mac release for tag ${{ inputs.tag_name }}"
-      - uses: actions/checkout@v4.2.0
+      - uses: actions/checkout@v4.2.2
         with:
           ref: ${{ inputs.tag_name }}
           fetch-depth: 0 # https://github.com/actions/checkout/issues/1471
@@ -137,7 +137,7 @@ jobs:
       APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
     steps:
       - run: echo "Creating Mac release for tag ${{ inputs.tag_name }}"
-      - uses: actions/checkout@v4.2.0
+      - uses: actions/checkout@v4.2.2
         with:
           ref: ${{ inputs.tag_name }}
           fetch-depth: 0 # https://github.com/actions/checkout/issues/1471