diff --git a/.github/workflows/tf-autosquash.yml b/.github/workflows/tf-autosquash.yml
index d067e2214..928a4928c 100644
--- a/.github/workflows/tf-autosquash.yml
+++ b/.github/workflows/tf-autosquash.yml
@@ -30,7 +30,7 @@ jobs:
           private-key: ${{ secrets.WE_HELPER_GITHUB_PRIVATE_KEY }}
 
       - name: Checkout the repository and persist credentials
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
         with:
           token: ${{ steps.app-token.outputs.token || github.token }}