diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a50bd4a0..fc19a243 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,7 +20,7 @@ jobs:
     env:
       SIXLABORS_LICENSE_KEY: ${{ secrets.SIXLABORS_LICENSE_KEY }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           # lib/starling-regexp is a submodule; the build fails without it.
           submodules: recursive
@@ -78,7 +78,7 @@ jobs:
     env:
       SIXLABORS_LICENSE_KEY: ${{ secrets.SIXLABORS_LICENSE_KEY }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           # lib/starling-regexp is a submodule; dotnet format compiles, so the
           # build graph still needs the submodule sources present.
@@ -133,7 +133,7 @@ jobs:
       STARLING_ALLOW_NETWORK: "1"
       SIXLABORS_LICENSE_KEY: ${{ secrets.SIXLABORS_LICENSE_KEY }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           # lib/starling-regexp is a submodule; the build fails without it.
           submodules: recursive
diff --git a/.github/workflows/fork-ci.yml b/.github/workflows/fork-ci.yml
index f2ad0798..a87e0f16 100644
--- a/.github/workflows/fork-ci.yml
+++ b/.github/workflows/fork-ci.yml
@@ -43,7 +43,7 @@ jobs:
     # not in scope — until a reviewer approves the run for this commit.
     environment: fork-ci
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           # Build the exact reviewed commit, not a moving ref. pull_request_target
           # defaults to the base branch, so the PR head must be requested
diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index 4c805b7c..2b5feeab 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -26,7 +26,7 @@ jobs:
       url: ${{ steps.deployment.outputs.page_url }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: actions/configure-pages@v6
       - uses: actions/upload-pages-artifact@v3
         with: