diff --git a/.github/workflows/e2e.yaml b/.github/workflows/e2e.yaml
index 96f2f6c2..85c7b3d2 100644
--- a/.github/workflows/e2e.yaml
+++ b/.github/workflows/e2e.yaml
@@ -17,7 +17,7 @@ jobs:
       ARTIFACTS: artifacts
 
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - uses: actions/setup-go@v6
       with:
         go-version-file: go.mod
diff --git a/.github/workflows/images.yaml b/.github/workflows/images.yaml
index 84942693..a28525c8 100644
--- a/.github/workflows/images.yaml
+++ b/.github/workflows/images.yaml
@@ -15,7 +15,7 @@ jobs:
       # renovate: datasource=github-releases depName=ko-build/ko
       KO_VERSION: v0.18.1
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
       with:
         # fetch all history so that git describe works (needed by hack/prepare-image-metadata.sh)
         fetch-depth: 0
diff --git a/.github/workflows/release-notes.yaml b/.github/workflows/release-notes.yaml
index 8215850d..7e17d350 100644
--- a/.github/workflows/release-notes.yaml
+++ b/.github/workflows/release-notes.yaml
@@ -10,7 +10,7 @@ jobs:
   release-notes:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - name: Draft release notes
       run: |
         set -o errexit
diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml
index 724a3d81..8b9282e0 100644
--- a/.github/workflows/renovate.yaml
+++ b/.github/workflows/renovate.yaml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
       with:
         token: ${{ secrets.RENOVATE_TOKEN }}
     - uses: actions/setup-go@v6
diff --git a/.github/workflows/verify.yaml b/.github/workflows/verify.yaml
index df5e1e2e..28a6c4de 100644
--- a/.github/workflows/verify.yaml
+++ b/.github/workflows/verify.yaml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - uses: actions/setup-go@v6
       with:
         go-version-file: go.mod