diff --git a/.github/workflows/check_changelog.yml b/.github/workflows/check_changelog.yml
index f1a2526a..968cc00a 100644
--- a/.github/workflows/check_changelog.yml
+++ b/.github/workflows/check_changelog.yml
@@ -13,7 +13,7 @@ jobs:
     if: (!contains(github.event.pull_request.labels.*.name, 'skip changelog'))
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Check that CHANGELOG is touched
         run: |
           git fetch origin ${{ github.base_ref }} --depth 1 && \
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 09a90aab..2799f7b1 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Install Ruby and dependencies
         uses: ruby/setup-ruby@v1
         with:
@@ -43,7 +43,7 @@ jobs:
       HATCHET_BUILDPACK_BASE: https://github.com/heroku/heroku-buildpack-java
       HATCHET_DEFAULT_STACK: ${{ matrix.stack }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Install Ruby and dependencies
         uses: ruby/setup-ruby@v1
         with:
@@ -58,7 +58,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       # These test both the local development `make run` workflow and that `bin/report` completes successfully
       # for both passing and failing builds (since `bin/report` can't easily be tested via Hatchet tests).
       - name: Run buildpack using default app fixture
diff --git a/.github/workflows/hatchet_app_cleaner.yml b/.github/workflows/hatchet_app_cleaner.yml
index a40d8d10..c5f7b24b 100644
--- a/.github/workflows/hatchet_app_cleaner.yml
+++ b/.github/workflows/hatchet_app_cleaner.yml
@@ -19,7 +19,7 @@ jobs:
       HEROKU_DISABLE_AUTOUPDATE: 1
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Install Ruby and dependencies
         uses: ruby/setup-ruby@v1
         with: