diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 9fe3b20..79e6e60 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -47,7 +47,7 @@
       fail-fast: false
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Install dependencies
         run: |
@@ -86,7 +86,7 @@
         php-version: [7.1, 7.2, 7.3, 7.4, 8.0, 8.1, 8.2, 8.3]
       fail-fast: false
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Set up PHP
         uses: shivammathur/setup-php@v2
@@ -141,7 +141,7 @@
           - '1.25'
       fail-fast: false
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - uses: actions/setup-go@v6
         with:
@@ -197,7 +197,7 @@
     env:
       GRADLE_VERSION: "8.4"
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - uses: actions/setup-java@v5
         with:
@@ -308,7 +308,7 @@
       run:
         shell: bash  # required by net install script
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Install dependencies
         run: |
@@ -392,7 +392,7 @@
     runs-on: ubuntu-24.04
     if: false                     # swift is currently broken and no maintainers around -> see THRIFT-5864
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Run bootstrap
         run: ./bootstrap.sh
@@ -430,7 +430,7 @@
     env:
       TOOLCHAIN_VERSION: 1.83.0
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Install dependencies
         run: |
@@ -498,7 +498,7 @@
           - "3.13" # Pin to 3.13 for now -> see THRIFT-5900
       fail-fast: false
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Install dependencies
         run: |
@@ -556,7 +556,7 @@
     needs: compiler
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Run bootstrap
         run: ./bootstrap.sh
@@ -585,7 +585,7 @@
     needs: compiler
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Install dependencies
         run: |
@@ -664,7 +664,7 @@
         client_lang: ['java', 'go,rs,cpp']
       fail-fast: false
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - uses: actions/setup-python@v6
         with:
diff --git a/.github/workflows/cmake.yml b/.github/workflows/cmake.yml
index b6c4273..508d2f0 100644
--- a/.github/workflows/cmake.yml
+++ b/.github/workflows/cmake.yml
@@ -16,7 +16,7 @@
   compiler:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Install dependencies
         run: |
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 5bc73a0..23d2607 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -31,7 +31,7 @@
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
         with:
           persist-credentials: false
           submodules: recursive
diff --git a/.github/workflows/pypi.yml b/.github/workflows/pypi.yml
index a98590a..12859db 100644
--- a/.github/workflows/pypi.yml
+++ b/.github/workflows/pypi.yml
@@ -33,7 +33,7 @@
       # IMPORTANT: this permission is mandatory for trusted publishing
       id-token: write
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Set up Python
         uses: actions/setup-python@v6
diff --git a/.github/workflows/release_rust.yml b/.github/workflows/release_rust.yml
index 55acbb1..933cddb 100644
--- a/.github/workflows/release_rust.yml
+++ b/.github/workflows/release_rust.yml
@@ -34,7 +34,7 @@
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Dryrun
         working-directory: lib/rs
         run: cargo publish --dry-run