diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..042f4fc
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,7 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "thursday"
diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index 167c9fd..1cc79ea 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -19,7 +19,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: mount Nix store on larger partition
         # on the Linux runner `/` doesn't have enough space, but there's a `/mnt` which does.
         if: runner.os == 'Linux'
diff --git a/.github/workflows/report-and-push.yml b/.github/workflows/report-and-push.yml
index 51d6a5e..fc99ba8 100644
--- a/.github/workflows/report-and-push.yml
+++ b/.github/workflows/report-and-push.yml
@@ -18,7 +18,7 @@ jobs:
       contents: write
       checks: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: mount Nix store on larger partition
         # on the Linux runner `/` doesn't have enough space, but there's a `/mnt` which does.
         if: runner.os == 'Linux'
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index 12af736..d1677e0 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -22,7 +22,7 @@ jobs:
       contents: write
       pull-requests: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: mount Nix store on larger partition
         # on the Linux runner `/` doesn't have enough space, but there's a `/mnt` which does.
         if: runner.os == 'Linux'