diff --git a/.github/workflows/conventional-pr.yml b/.github/workflows/conventional-pr.yml
index 32dc807..ba43b8f 100644
--- a/.github/workflows/conventional-pr.yml
+++ b/.github/workflows/conventional-pr.yml
@@ -12,7 +12,7 @@ jobs:
   lint-pr:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: CondeNast/conventional-pull-request-action@v0.2.0
         with:
           commitTitleMatch: false
diff --git a/.github/workflows/lightningcss.yml b/.github/workflows/lightningcss.yml
index 99538e6..171db30 100644
--- a/.github/workflows/lightningcss.yml
+++ b/.github/workflows/lightningcss.yml
@@ -22,7 +22,7 @@ jobs:
     runs-on: 'ubuntu-latest'
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - uses: erlef/setup-elixir@v1
         with:
@@ -47,7 +47,7 @@ jobs:
     runs-on: 'ubuntu-latest'
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - uses: erlef/setup-elixir@v1
         with:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b47be30..6eaf8fa 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -23,7 +23,7 @@ jobs:
     timeout-minutes: 15
     if: "!startsWith(github.event.head_commit.message, '[Release]')"
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           fetch-depth: 0
       - uses: jdx/mise-action@v2