diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 6f77c26f5a..727cfb3e90 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -36,7 +36,7 @@ jobs:
   publish:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           # chartpress requires git history to set chart version and image tags
           # correctly
diff --git a/.github/workflows/test-chart.yaml b/.github/workflows/test-chart.yaml
index 8f34d5ba9a..26092a0c7b 100644
--- a/.github/workflows/test-chart.yaml
+++ b/.github/workflows/test-chart.yaml
@@ -30,7 +30,7 @@ jobs:
   lint_shell_scripts:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-python@v5
         with:
           python-version: "3.11"
@@ -44,7 +44,7 @@ jobs:
   lint_and_validate_rendered_templates:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-python@v5
         with:
           python-version: "3.11"
@@ -77,7 +77,7 @@ jobs:
           - helm-version: v3.5.0 # minimal required version
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-python@v5
         with:
           python-version: "3.11"
@@ -222,7 +222,7 @@ jobs:
     runs-on: ${{ matrix.os }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           # chartpress requires git history to set chart version and image tags
           # correctly
@@ -412,7 +412,7 @@ jobs:
     runs-on: ubuntu-24.04
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           # chartpress requires git history to set chart version and image tags
           # correctly
diff --git a/.github/workflows/test-docker-build.yaml b/.github/workflows/test-docker-build.yaml
index f0681b928b..a891eee4be 100644
--- a/.github/workflows/test-docker-build.yaml
+++ b/.github/workflows/test-docker-build.yaml
@@ -31,7 +31,7 @@ jobs:
   build_images:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           # chartpress requires git history to set chart version and image tags
           # correctly
diff --git a/.github/workflows/test-docs.yaml b/.github/workflows/test-docs.yaml
index 7f27adb743..af6441fc2a 100644
--- a/.github/workflows/test-docs.yaml
+++ b/.github/workflows/test-docs.yaml
@@ -27,7 +27,7 @@ jobs:
   linkcheck:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           # chartpress, used by docs/conf.py, requires git history to set
           # chart version and image tags correctly
diff --git a/.github/workflows/vuln-scan.yaml b/.github/workflows/vuln-scan.yaml
index bb86799cb6..2d93dc0ab4 100644
--- a/.github/workflows/vuln-scan.yaml
+++ b/.github/workflows/vuln-scan.yaml
@@ -51,7 +51,7 @@ jobs:
             accept_failure: false
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           # chartpress requires git history to set chart version and image tags
           # correctly
diff --git a/.github/workflows/watch-dependencies.yaml b/.github/workflows/watch-dependencies.yaml
index 4893752ad7..83c63ff2fb 100644
--- a/.github/workflows/watch-dependencies.yaml
+++ b/.github/workflows/watch-dependencies.yaml
@@ -79,7 +79,7 @@ jobs:
             version_patch_regexp_group_suffix: "?"
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Get values.yaml pinned tag of ${{ matrix.registry }}/${{ matrix.repository }}
         id: local
@@ -134,7 +134,7 @@ jobs:
     environment: watch-dependencies
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-python@v5
         with:
           python-version: "3.13"
@@ -206,7 +206,7 @@ jobs:
     environment: watch-dependencies
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Refreeze images/*/requirements.txt based on images/*/unfrozen/requirements.txt
         run: ci/refreeze