diff --git a/.github/workflows/bump-chart-versions.yml b/.github/workflows/bump-chart-versions.yml
index 370a1fef..a198d308 100644
--- a/.github/workflows/bump-chart-versions.yml
+++ b/.github/workflows/bump-chart-versions.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
 
       - name: Extract latest version
         run: |
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index 802f2973..b9c9b4cf 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -32,7 +32,7 @@ jobs:
       name: e2e-test
     timeout-minutes: 90
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
       # TODO: replace with https://github.com/google-github-actions/auth and
       # workload identity instead of an exported SA credential.
       - name: "Auth to GCP exist env"
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 8ed5383d..0e63def2 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -32,7 +32,7 @@ jobs:
     runs-on: ${{ matrix.os }}
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
       - uses: actions/setup-go@v4
         with:
           go-version: "1.24"