diff --git a/.github/workflows/codecoverage.yml b/.github/workflows/codecoverage.yml
index 027d569b3..7c2385a36 100644
--- a/.github/workflows/codecoverage.yml
+++ b/.github/workflows/codecoverage.yml
@@ -55,14 +55,14 @@ jobs:
           coverage: ${{ matrix.php == env.COVERAGE_PHP_VERSION && 'xdebug' || 'none' }}
 
       - name: Checkout repository
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           # Value already defaults to true, but `persist-credentials` is required to push new commits to the repository.
           persist-credentials: true
 
       - name: Checkout GitHub Pages branch for code coverage report
         if: ${{ matrix.php == env.COVERAGE_PHP_VERSION }}
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           ref: gh-pages
           path: gh-pages
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 020eaf8f0..7a698d339 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -36,7 +36,7 @@ jobs:
     name: PHP tests ${{ matrix.php }} ${{ matrix.os }}
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Install PHP
         uses: shivammathur/setup-php@v2
@@ -126,7 +126,7 @@ jobs:
     name: Spelling
     steps:
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Search for misspellings
         uses: crate-ci/typos@master
@@ -136,7 +136,7 @@ jobs:
     name: Lint project files
     steps:
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Install PHP
         uses: shivammathur/setup-php@v2
diff --git a/.github/workflows/phpstan.yml b/.github/workflows/phpstan.yml
index 99ab37d95..4be434cb5 100644
--- a/.github/workflows/phpstan.yml
+++ b/.github/workflows/phpstan.yml
@@ -17,7 +17,7 @@ jobs:
 
     steps:
       - name: Checkout PR branch
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0 # needed for baseline comparison
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0fc8abe3b..ab59d8cfe 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,7 +15,7 @@ jobs:
     name: Create Strauss phar on new release
     steps:
       - name: Git checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v6
         with:
           ref: master
 
diff --git a/.github/workflows/updateversionfromchangelog.yml b/.github/workflows/updateversionfromchangelog.yml
index 9ea9355a2..1140a3460 100644
--- a/.github/workflows/updateversionfromchangelog.yml
+++ b/.github/workflows/updateversionfromchangelog.yml
@@ -20,7 +20,7 @@ jobs:
     name: Create Strauss phar on new release
     steps:
       - name: Git checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v6
         with:
           ref: master