diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d2667579..fdc40a72 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,7 +20,7 @@ jobs:
         # Validate the engines.node lower bound (20.19) and current LTS / latest
         node: [ 20.19, 22, 24 ]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - uses: pnpm/action-setup@v4
 
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index 87e74f20..fa8aa732 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -20,7 +20,7 @@ jobs:
       matrix:
         project: [ desktop, mobile ]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - uses: pnpm/action-setup@v4
 
diff --git a/.github/workflows/lighthouse.yml b/.github/workflows/lighthouse.yml
index 7651099c..e561c975 100644
--- a/.github/workflows/lighthouse.yml
+++ b/.github/workflows/lighthouse.yml
@@ -28,7 +28,7 @@ jobs:
         # fine on macOS/Linux desktops with mobile preset; CI is the gap.
         formFactor: [ desktop ]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - uses: pnpm/action-setup@v4
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ed189473..58a0c85c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     if: startsWith(github.event.release.tag_name, 'v')
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - uses: pnpm/action-setup@v4
 
diff --git a/.github/workflows/size.yml b/.github/workflows/size.yml
index 705d921a..b34395cc 100644
--- a/.github/workflows/size.yml
+++ b/.github/workflows/size.yml
@@ -13,7 +13,7 @@ jobs:
     name: size-limit per package
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           # size-limit-action diffs against the base branch, needs full history
           fetch-depth: 0