diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 714946e5..ba0fa212 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -19,7 +19,7 @@ jobs:
       matrix:
         language: [ 'go', 'typescript' ]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           # Avoid https://github.com/github/codeql/issues/13992
diff --git a/.github/workflows/release-beta.yml b/.github/workflows/release-beta.yml
index a2aea0fc..a07b5954 100644
--- a/.github/workflows/release-beta.yml
+++ b/.github/workflows/release-beta.yml
@@ -17,7 +17,7 @@ jobs:
       # releases.
       contents: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: bazelbuild/setup-bazelisk@v3
       - name: Check Manifest
         run: |
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2e800de9..19fc72d2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,7 +9,7 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/v')
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Check Manifest
         run: |
           MANIFEST_VERSION=$(cat manifest.json | python3 -c "import sys, json; print(json.load(sys.stdin)['version'])")
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 4fca35c3..42ae82d6 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -17,7 +17,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: bazelbuild/setup-bazelisk@v3
       - uses: actions/cache@v4
         name: Setup Bazel Cache