diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml
index 0c9d911..ce1fc2b 100644
--- a/.github/workflows/dependabot.yml
+++ b/.github/workflows/dependabot.yml
@@ -11,7 +11,7 @@ jobs:
     if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == 'HTTPArchive/tech-report-apis'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - run: |
           cd src
           npm ci
diff --git a/.github/workflows/deployment.yaml b/.github/workflows/deployment.yaml
index 32b22c6..364f01d 100644
--- a/.github/workflows/deployment.yaml
+++ b/.github/workflows/deployment.yaml
@@ -13,7 +13,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - run: |
           cd src
           npm ci
@@ -27,7 +27,7 @@ jobs:
       run:
         working-directory: ./terraform/dev
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Google Cloud Auth
         uses: 'google-github-actions/auth@v2'
         with:
@@ -72,7 +72,7 @@ jobs:
       run:
         working-directory: ./terraform/prod
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Google Cloud Auth
         uses: 'google-github-actions/auth@v2'
         with: