diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 18a7d01..656646b 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -9,7 +9,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: DeterminateSystems/nix-installer-action@v20
       - uses: DeterminateSystems/flakehub-cache-action@v2
       - run: nix build .#pam_spicedb .#pam_print
@@ -17,7 +17,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: DeterminateSystems/nix-installer-action@v20
         env:
           NIX_INSTALLER_EXTRA_CONF: sandbox = false
diff --git a/.github/workflows/update.yaml b/.github/workflows/update.yaml
index ec5323d..28456e1 100644
--- a/.github/workflows/update.yaml
+++ b/.github/workflows/update.yaml
@@ -14,7 +14,7 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: DeterminateSystems/determinate-nix-action@v3.13.0
       - uses: DeterminateSystems/update-flake-lock@v27
         with: