diff --git a/.github/workflows/cargo-build.yml b/.github/workflows/cargo-build.yml
index 9a49f6e..466ccf0 100644
--- a/.github/workflows/cargo-build.yml
+++ b/.github/workflows/cargo-build.yml
@@ -31,7 +31,7 @@ jobs:
       # Remove this when it no longer FTBFS on `ring` in CI.
       CARGO_PROFILE_TEST_BUILD_OVERRIDE_DEBUG: true
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions-rust-lang/setup-rust-toolchain@v1
       - name: Install dependencies
         run: |
diff --git a/.github/workflows/cargo-clippy.yml b/.github/workflows/cargo-clippy.yml
index a3fe8d6..8c84a37 100644
--- a/.github/workflows/cargo-clippy.yml
+++ b/.github/workflows/cargo-clippy.yml
@@ -30,7 +30,7 @@ jobs:
       # Remove this when it no longer FTBFS on `ring` in CI.
       CARGO_PROFILE_TEST_BUILD_OVERRIDE_DEBUG: true
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions-rust-lang/setup-rust-toolchain@v1
         with:
           components: clippy
diff --git a/.github/workflows/cargo-fmt.yml b/.github/workflows/cargo-fmt.yml
index 45de4bc..3d618ba 100644
--- a/.github/workflows/cargo-fmt.yml
+++ b/.github/workflows/cargo-fmt.yml
@@ -31,7 +31,7 @@ jobs:
       # Remove this when it no longer FTBFS on `ring` in CI.
       CARGO_PROFILE_TEST_BUILD_OVERRIDE_DEBUG: true
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions-rust-lang/setup-rust-toolchain@v1
         with:
           components: rustfmt
diff --git a/.github/workflows/cargo-test.yml b/.github/workflows/cargo-test.yml
index 01c17fa..a8da101 100644
--- a/.github/workflows/cargo-test.yml
+++ b/.github/workflows/cargo-test.yml
@@ -28,7 +28,7 @@ jobs:
       # Remove this when it no longer FTBFS on `ring` in CI.
       CARGO_PROFILE_TEST_BUILD_OVERRIDE_DEBUG: true
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions-rust-lang/setup-rust-toolchain@v1
       - uses: taiki-e/install-action@cargo-llvm-cov
       - uses: taiki-e/install-action@nextest
diff --git a/.github/workflows/make-release.yml b/.github/workflows/make-release.yml
index e969714..5b4531e 100644
--- a/.github/workflows/make-release.yml
+++ b/.github/workflows/make-release.yml
@@ -13,7 +13,7 @@ jobs:
     name: make release
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: 'Authenticate to Google Cloud'
         uses: 'google-github-actions/auth@v2.1.7'
         with:
@@ -91,21 +91,21 @@ jobs:
     needs: [makerelease]
     name: createrelease
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Install latest nightly
         uses: dtolnay/rust-toolchain@stable
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v5
         with:
           name:  release-macos-latest-${{github.ref_name}}
           path: build
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v5
         with:
           name:  release-ubuntu-latest-${{github.ref_name}}
           path: build
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v5
         with:
           name:  ubuntu-latest-${{github.ref_name}}-README.md
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v5
         with:
           name:  macos-latest-${{github.ref_name}}-README.md
       - name: combine readmes
diff --git a/.github/workflows/update-spec-for-repos.yml b/.github/workflows/update-spec-for-repos.yml
index af60909..6f0853a 100644
--- a/.github/workflows/update-spec-for-repos.yml
+++ b/.github/workflows/update-spec-for-repos.yml
@@ -19,16 +19,16 @@ jobs:
         repo: [modeling-app]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/create-github-app-token@v1
+      - uses: actions/create-github-app-token@v2
         id: app-token
         with:
           # required
           app-id: ${{ secrets.GH_ORG_APP_ID }}
           private-key: ${{ secrets.GH_ORG_APP_PRIVATE_KEY }}
           owner: ${{ github.repository_owner }}
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       # Checkout the repo since we will want to update the file there.
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           repository: 'kittycad/${{ matrix.repo }}'
           path: ${{ matrix.repo }}
diff --git a/.github/workflows/validate-openapi-spec.yml b/.github/workflows/validate-openapi-spec.yml
index 70a0e27..f61e569 100644
--- a/.github/workflows/validate-openapi-spec.yml
+++ b/.github/workflows/validate-openapi-spec.yml
@@ -16,7 +16,7 @@ jobs:
   format:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-node@v4.1.0
         with:
           node-version: '18'