diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e01bcd93f..c30d1b58b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -57,7 +57,7 @@ jobs:
           mkdir -p $HOME/junifer_data/v7
           cp -ar /root/junifer_data/v7/. $HOME/junifer_data/v7/
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           submodules: true
       - name: Set up Python ${{ matrix.python-version }}
diff --git a/.github/workflows/docker-ci-publish.yml b/.github/workflows/docker-ci-publish.yml
index d92720602..ea23a820c 100644
--- a/.github/workflows/docker-ci-publish.yml
+++ b/.github/workflows/docker-ci-publish.yml
@@ -32,22 +32,22 @@ jobs:
           sudo docker builder prune -a
       - run: df -h
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Install cosign
         if: github.event_name != 'pull_request'
         uses: sigstore/cosign-installer@v4.0.0
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3.11.1
+        uses: docker/setup-buildx-action@v3.12.0
       - name: Log into registry ${{ env.REGISTRY }}
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@v3.6.0
+        uses: docker/login-action@v3.7.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - name: Extract Docker metadata
         id: meta
-        uses: docker/metadata-action@v5.8.0
+        uses: docker/metadata-action@v5.10.0
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
       - name: Build and push Docker image
diff --git a/.github/workflows/docker-docs-publish.yml b/.github/workflows/docker-docs-publish.yml
index 8e8bf7203..0f4292caf 100644
--- a/.github/workflows/docker-docs-publish.yml
+++ b/.github/workflows/docker-docs-publish.yml
@@ -32,22 +32,22 @@ jobs:
           sudo docker builder prune -a
       - run: df -h
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Install cosign
         if: github.event_name != 'pull_request'
         uses: sigstore/cosign-installer@v4.0.0
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3.11.1
+        uses: docker/setup-buildx-action@v3.12.0
       - name: Log into registry ${{ env.REGISTRY }}
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@v3.6.0
+        uses: docker/login-action@v3.7.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - name: Extract Docker metadata
         id: meta
-        uses: docker/metadata-action@v5.8.0
+        uses: docker/metadata-action@v5.10.0
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
       - name: Build and push Docker image
diff --git a/.github/workflows/docs-preview.yml b/.github/workflows/docs-preview.yml
index 42b278f7d..e8794bfcb 100644
--- a/.github/workflows/docs-preview.yml
+++ b/.github/workflows/docs-preview.yml
@@ -43,7 +43,7 @@ jobs:
         mkdir -p $HOME/junifer_data/v7
         cp -ar /root/junifer_data/v7/. $HOME/junifer_data/v7/
     - name: Checkout repository
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       with:
         fetch-depth: 0
         submodules: true
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 62a92d793..9ba7701bf 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -34,7 +34,7 @@ jobs:
         mkdir -p $HOME/junifer_data/v7
         cp -ar /root/junifer_data/v7/. $HOME/junifer_data/v7/
     - name: Checkout repository
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       with:
         # require all of history to see all tagged versions' docs
         fetch-depth: 0
@@ -55,7 +55,7 @@ jobs:
     - name: Checkout gh-pages
       # As we already did a deploy of gh-pages above, it is guaranteed to be there
       # so check it out so we can selectively build docs below
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       with:
           ref: gh-pages
           path: docs/_build
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 7f307a402..d4552657b 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -8,7 +8,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Install Python
         uses: actions/setup-python@v6
         with:
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 6065c5d5f..e06444680 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -18,7 +18,7 @@ jobs:
       contents: write
     steps:
     - name: Checkout source
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       with:
         fetch-depth: 0
         submodules: true