diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml
index fe8f7ef5..f4242909 100644
--- a/.github/workflows/backport.yml
+++ b/.github/workflows/backport.yml
@@ -26,7 +26,7 @@ jobs:
         with:
           app-id: ${{ vars.CI_APP_ID }}
           private-key: ${{ secrets.CI_APP_PRIVATE_KEY }}
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           token: ${{ steps.app-token.outputs.token || secrets.GITHUB_TOKEN }}
           ref: ${{ github.event.pull_request.head.sha }}
diff --git a/.github/workflows/github_pages.yml b/.github/workflows/github_pages.yml
index e7c594d7..d437027c 100644
--- a/.github/workflows/github_pages.yml
+++ b/.github/workflows/github_pages.yml
@@ -12,7 +12,7 @@ jobs:
         os: [ubuntu-latest]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: cachix/install-nix-action@v31
         with:
           nix_path: nixpkgs=channel:nixos-unstable
diff --git a/.github/workflows/tag-maintainers.yml b/.github/workflows/tag-maintainers.yml
index 25c91000..c14c8f5b 100644
--- a/.github/workflows/tag-maintainers.yml
+++ b/.github/workflows/tag-maintainers.yml
@@ -23,7 +23,7 @@ jobs:
           app-id: ${{ vars.CI_APP_ID }}
           private-key: ${{ secrets.CI_APP_PRIVATE_KEY }}
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ github.event.pull_request.base.sha }}
       - name: Get Nixpkgs revision from flake.lock
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index a34bc525..045b80b3 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -15,7 +15,7 @@ jobs:
       hm: ${{ steps.changes.outputs.hm }}
       tests: ${{ steps.changes.outputs.tests }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: dorny/paths-filter@v3
         id: changes
         with:
@@ -47,7 +47,7 @@ jobs:
         os: [ubuntu-latest, macos-latest]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Get Nixpkgs revision from flake.lock
         id: get-nixpkgs
         run: |
diff --git a/.github/workflows/update-flake.yml b/.github/workflows/update-flake.yml
index 3d75b3ca..26000eb3 100644
--- a/.github/workflows/update-flake.yml
+++ b/.github/workflows/update-flake.yml
@@ -34,7 +34,7 @@ jobs:
             echo "email=$id+$name@users.noreply.github.com"
           } >> "$GITHUB_OUTPUT"
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ matrix.branch }}
           token: ${{ steps.app-token.outputs.token || secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/update-maintainers.yml b/.github/workflows/update-maintainers.yml
index cd7ccab9..bfcea494 100644
--- a/.github/workflows/update-maintainers.yml
+++ b/.github/workflows/update-maintainers.yml
@@ -48,7 +48,7 @@ jobs:
             echo "email=$id+$name@users.noreply.github.com"
           } >> "$GITHUB_OUTPUT"
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           token: ${{ steps.app-token.outputs.token || github.token }}
       - name: Get Nixpkgs revision from flake.lock
diff --git a/.github/workflows/validate-maintainers.yml b/.github/workflows/validate-maintainers.yml
index 27f3ab29..654f6fc6 100644
--- a/.github/workflows/validate-maintainers.yml
+++ b/.github/workflows/validate-maintainers.yml
@@ -15,7 +15,7 @@ jobs:
     if: github.repository_owner == 'nix-community'
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Get Nixpkgs revision from flake.lock
         id: get-nixpkgs
         run: |