diff --git a/.github/workflows/build-phar.yml b/.github/workflows/build-phar.yml
index 93ed821d..98d57093 100644
--- a/.github/workflows/build-phar.yml
+++ b/.github/workflows/build-phar.yml
@@ -37,7 +37,7 @@ jobs:
           coverage: none
           tools: composer, box
           php-version: "${{ matrix.php-version }}"
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
       # Fixes `git describe` picking the wrong tag - see https://github.com/php/pie/issues/307
diff --git a/.github/workflows/check-outdated-trusted-root.yml b/.github/workflows/check-outdated-trusted-root.yml
index df697c10..9575dcf3 100644
--- a/.github/workflows/check-outdated-trusted-root.yml
+++ b/.github/workflows/check-outdated-trusted-root.yml
@@ -14,7 +14,7 @@ jobs:
       contents: read
       issues: write # This permission is needed to create the issue
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Pull new trusted root
         run: gh attestation trusted-root > resources/new-trusted-root.jsonl
       - name: Create an issue if different
diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml
index 36cb40cd..8192c19a 100644
--- a/.github/workflows/continuous-integration.yml
+++ b/.github/workflows/continuous-integration.yml
@@ -29,7 +29,7 @@ jobs:
           extensions: intl, sodium, zip
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: ramsey/composer-install@v3
       - name: GH token
         if: matrix.operating-system != 'windows-latest'
@@ -115,7 +115,7 @@ jobs:
           make -j$(nproc)
           sudo make install
           cd $GITHUB_WORKSPACE
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Composer Install
         run: composer install --ignore-platform-reqs
       - name: Run bundled PHP install test
@@ -144,7 +144,7 @@ jobs:
           extensions: intl, sodium, zip
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: ramsey/composer-install@v3
       - name: Run Behat on Windows
         if: matrix.operating-system == 'windows-latest'
@@ -163,7 +163,7 @@ jobs:
           extensions: intl, sodium, zip
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: ramsey/composer-install@v3
       - name: Run PHPCS
         run: vendor/bin/phpcs
@@ -178,7 +178,7 @@ jobs:
           extensions: intl, sodium, zip
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: ramsey/composer-install@v3
       - name: Validate the composer configuration
         run: composer validate --strict
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 5bde9d5f..40ad59bf 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -32,7 +32,7 @@ jobs:
       - build-phar
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Build documentation
         run: .github/docs/build-docs.sh
       - name: Fetch built PHAR from artifacts
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 4968a8b4..bbb9c1c3 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -55,7 +55,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Fetch built PHAR from artifacts
         uses: actions/download-artifact@v4