diff --git a/.github/workflows/byoc-pilot-release.yml b/.github/workflows/byoc-pilot-release.yml
index e07035c6..606e4073 100644
--- a/.github/workflows/byoc-pilot-release.yml
+++ b/.github/workflows/byoc-pilot-release.yml
@@ -70,7 +70,7 @@ jobs:
     runs-on: ubuntu-22.04
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 1
       - uses: dtolnay/rust-toolchain@master
@@ -99,7 +99,7 @@ jobs:
     runs-on: ubuntu-22.04
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: dtolnay/rust-toolchain@master
         with:
           toolchain: ${{ env.RUST_VERSION }}
@@ -135,7 +135,7 @@ jobs:
     runs-on: ubuntu-22.04
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: dtolnay/rust-toolchain@master
         with:
           toolchain: ${{ env.RUST_VERSION }}
@@ -183,7 +183,7 @@ jobs:
       matrix:
         variant: [clean, cached]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0  # provenance needs commit SHA history
 
@@ -321,7 +321,7 @@ jobs:
     runs-on: ubuntu-22.04
     timeout-minutes: 20
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Download canonical build (clean variant)
         uses: actions/download-artifact@v4