diff --git a/.github/workflows/1_create_release_pr.yml b/.github/workflows/1_create_release_pr.yml
index 858f90ebfb..66f1fca524 100644
--- a/.github/workflows/1_create_release_pr.yml
+++ b/.github/workflows/1_create_release_pr.yml
@@ -33,7 +33,7 @@ jobs:
         uses: cylc/release-actions/stage-1/sanitize-inputs@v1
 
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ env.BASE_REF }}
           fetch-depth: 0  # need to fetch all commits to check contributors
diff --git a/.github/workflows/2_auto_publish_release.yml b/.github/workflows/2_auto_publish_release.yml
index e0db335f04..f54703c84b 100644
--- a/.github/workflows/2_auto_publish_release.yml
+++ b/.github/workflows/2_auto_publish_release.yml
@@ -22,7 +22,7 @@ jobs:
     steps:
 
     - name: Checkout repo
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         ref: ${{ env.MERGE_SHA }}
 
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ac39679ccc..870264803d 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -38,7 +38,7 @@ jobs:
             python: '3.12'
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Configure Python
         uses: mamba-org/setup-micromamba@v2
diff --git a/.github/workflows/shortlog.yml b/.github/workflows/shortlog.yml
index cb588d8b31..73ffe991a3 100644
--- a/.github/workflows/shortlog.yml
+++ b/.github/workflows/shortlog.yml
@@ -14,7 +14,7 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0  # need to fetch all commits to check contributors
 
diff --git a/.github/workflows/test-conda-builds.yml b/.github/workflows/test-conda-builds.yml
index a20f9af32e..ee0d1baf5c 100644
--- a/.github/workflows/test-conda-builds.yml
+++ b/.github/workflows/test-conda-builds.yml
@@ -32,7 +32,7 @@ jobs:
       ENV_FILE: conda-environment.yml
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: modify conda env file
         run: |
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 2168cdb1f1..5df60d08c7 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -53,7 +53,7 @@ jobs:
     timeout-minutes: 3
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ inputs.rose_ref || github.sha }}
 
@@ -103,7 +103,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ inputs.rose_ref || github.sha }}
           path: rose
@@ -161,7 +161,7 @@ jobs:
 
       - name: Checkout FCM
         if: startsWith(matrix.os, 'ubuntu')
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           repository: ${{ inputs.fcm_repo || 'metomi/fcm' }}
           ref: ${{ inputs.fcm_ref || 'master' }}
@@ -236,7 +236,7 @@ jobs:
         python-version: ['3']
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ inputs.rose_ref || github.sha }}
 
diff --git a/.github/workflows/test_rsync_test_script.yml b/.github/workflows/test_rsync_test_script.yml
index 9b754acc1f..9d469a4247 100644
--- a/.github/workflows/test_rsync_test_script.yml
+++ b/.github/workflows/test_rsync_test_script.yml
@@ -28,7 +28,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ github.event.inputs.rose_ref || github.sha }}
           path: rose
diff --git a/.github/workflows/update_copyright.yml b/.github/workflows/update_copyright.yml
index 5488caa445..d7e4976c32 100644
--- a/.github/workflows/update_copyright.yml
+++ b/.github/workflows/update_copyright.yml
@@ -30,7 +30,7 @@ jobs:
     steps:
 
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Configure git
         uses: cylc/release-actions/configure-git@v1
diff --git a/.github/workflows/update_tutorials.yml b/.github/workflows/update_tutorials.yml
index 1fcd5a8c34..fd05cac595 100644
--- a/.github/workflows/update_tutorials.yml
+++ b/.github/workflows/update_tutorials.yml
@@ -21,13 +21,13 @@ jobs:
       CYLC_REF: ${{ inputs.cylc_ref || 'master' }}
     steps:
       - name: Checkout rose
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ env.ROSE_REF }}
           path: rose
 
       - name: Checkout cylc-flow
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           repository: cylc/cylc-flow
           ref: ${{ env.CYLC_REF }}