diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 9a538c12cfa42..806f7fad67b04 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -7,3 +7,6 @@ updates:
     open-pull-requests-limit: 5
     labels:
       - area-codeflow
+    ignore:
+      - dependency-name: "actions/checkout"
+        update-types: ["version-update:semver-patch","version-update:semver-minor"]
diff --git a/.github/workflows/aspnetcore-sync.yml b/.github/workflows/aspnetcore-sync.yml
index e80fb301fa4cb..582f371cf9ab4 100644
--- a/.github/workflows/aspnetcore-sync.yml
+++ b/.github/workflows/aspnetcore-sync.yml
@@ -16,14 +16,14 @@ jobs:
     runs-on: windows-latest
     steps:
     - name: Checkout aspnetcore
-      uses: actions/checkout@v2.0.0
+      uses: actions/checkout@v4
       with:
         # Test this script using changes in a fork
         repository: 'dotnet/aspnetcore'
         path: aspnetcore
         ref: main
     - name: Checkout runtime
-      uses: actions/checkout@v2.0.0
+      uses: actions/checkout@v4
       with:
         # Test this script using changes in a fork
         repository: 'dotnet/runtime'
diff --git a/.github/workflows/bump-chrome-version.yml b/.github/workflows/bump-chrome-version.yml
index e47563ca44a07..e1d1e89658ca0 100644
--- a/.github/workflows/bump-chrome-version.yml
+++ b/.github/workflows/bump-chrome-version.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Setup Branch
         run: |
           git config user.name github-actions[bot]