diff --git a/.github/workflows/pdd.yml b/.github/workflows/pdd.yml
index 98b39a9..f4caa2d 100644
--- a/.github/workflows/pdd.yml
+++ b/.github/workflows/pdd.yml
@@ -10,5 +10,5 @@ jobs:
   pdd:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: volodya-lombrozo/pdd-action@master
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 6f8488a..163ca78 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -14,7 +14,7 @@ jobs:
       contents: write
       id-token: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-node@v4
         with:
           node-version: 18
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index e3edb07..e04a876 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -12,7 +12,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - name: node 18
       uses: actions/setup-node@v4
       with:
@@ -34,7 +34,7 @@ jobs:
     permissions:
       packages: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: semgrep ci
         run: semgrep ci
           --config p/default
@@ -45,13 +45,13 @@ jobs:
     runs-on: ubuntu-latest
     container: node:18
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - run: npm audit
   fuzz:
     runs-on: ubuntu-latest
     container: node:18
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - run: npm ci
       - run: npm run fuzz
       - name: upload fuzz/in fuzz/crashes