diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a9bab2dd..a6b13892 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,7 +20,7 @@ jobs:
     timeout-minutes: 1
 
     steps:
-    - uses: actions/checkout@v4.2.2
+    - uses: actions/checkout@v5.0.0
 
     - name: typos
       uses: crate-ci/typos@v1.35.3
@@ -52,7 +52,7 @@ jobs:
       matrix:
         py: ["3.11", "3.13"]
     steps:
-    - uses: actions/checkout@v4.2.2
+    - uses: actions/checkout@v5.0.0
 
     - uses: astral-sh/setup-uv@v6.4.3
       with:
@@ -69,7 +69,7 @@ jobs:
       matrix:
         py: ["3.11", "3.13"]
     steps:
-    - uses: actions/checkout@v4.2.2
+    - uses: actions/checkout@v5.0.0
 
     - uses: astral-sh/setup-uv@v6.4.3
       with:
@@ -89,7 +89,7 @@ jobs:
         os: [ubuntu-latest, macos-latest, windows-latest]
         py: ["3.11", "3.12", "3.13", "3.14"]
     steps:
-    - uses: actions/checkout@v4.2.2
+    - uses: actions/checkout@v5.0.0
 
     - uses: astral-sh/setup-uv@v6.4.3
       with:
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 9da635ad..89cbed28 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -23,7 +23,7 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4.2.2
+    - uses: actions/checkout@v5.0.0
 
     - name: Configure Git Credentials
       run: |
diff --git a/.github/workflows/publish-pypi.yml b/.github/workflows/publish-pypi.yml
index 942af2a0..592d2e8a 100644
--- a/.github/workflows/publish-pypi.yml
+++ b/.github/workflows/publish-pypi.yml
@@ -16,7 +16,7 @@ jobs:
     permissions:
       id-token: write
     steps:
-    - uses: actions/checkout@v4.2.2
+    - uses: actions/checkout@v5.0.0
     - name: setup uv
       uses: astral-sh/setup-uv@v6.4.3
       with:
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index a5fcf24d..899e5c40 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -11,9 +11,9 @@ jobs:
   renovate:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4.2.2
+    - uses: actions/checkout@v5.0.0
 
-    - uses: renovatebot/github-action@v43.0.6
+    - uses: renovatebot/github-action@v43.0.7
       with:
         configurationFile: .github/renovate-config.json
         token: ${{ secrets.RENOVATE_TOKEN }}