diff --git a/.github/workflows/autofix.yml b/.github/workflows/autofix.yml
index 4b869becf2ce..b5248169ec64 100644
--- a/.github/workflows/autofix.yml
+++ b/.github/workflows/autofix.yml
@@ -5,7 +5,7 @@ jobs:
   autofix:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - uses: sbt/setup-sbt@v1
 
diff --git a/.github/workflows/dependency-graph.yml b/.github/workflows/dependency-graph.yml
index b0ed39f5ed2d..455369434d5b 100644
--- a/.github/workflows/dependency-graph.yml
+++ b/.github/workflows/dependency-graph.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
     
diff --git a/.github/workflows/pre-build.yml b/.github/workflows/pre-build.yml
index da3f3dfeffcb..9db11f59e889 100644
--- a/.github/workflows/pre-build.yml
+++ b/.github/workflows/pre-build.yml
@@ -26,7 +26,7 @@ jobs:
     timeout-minutes: ${{ inputs.timeout-minutes }}
     steps:
       # For normal PR jobs, just checkout the base_ref the PR is against
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with: { fetch-depth: 1 }
 
       - uses: ./.github/actions/pre-build-setup
diff --git a/.github/workflows/publish-artifacts.yml b/.github/workflows/publish-artifacts.yml
index 0b43eb39dacc..44f1bc6ff3a0 100644
--- a/.github/workflows/publish-artifacts.yml
+++ b/.github/workflows/publish-artifacts.yml
@@ -70,7 +70,7 @@ jobs:
           distribution: 'temurin'
           java-version: '11'
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with: { fetch-depth: 0 }
 
       - run: "echo temurin:11 > .mill-jvm-version"
diff --git a/.github/workflows/publish-bridges.yaml b/.github/workflows/publish-bridges.yaml
index a93f0aa4e3ec..b33a56ec081b 100644
--- a/.github/workflows/publish-bridges.yaml
+++ b/.github/workflows/publish-bridges.yaml
@@ -35,7 +35,7 @@ jobs:
           distribution: 'temurin'
           java-version: '11'
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with: { fetch-depth: 0 }
 
       - run: "echo temurin:11 > .mill-jvm-version"
diff --git a/.github/workflows/publish-docs.yml b/.github/workflows/publish-docs.yml
index f72c3b085321..67bc6b7e0001 100644
--- a/.github/workflows/publish-docs.yml
+++ b/.github/workflows/publish-docs.yml
@@ -25,7 +25,7 @@ jobs:
       MILL_DISABLE_SCALADOC_ANNOTATION: 1
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with: {fetch-depth: 0}
 
       - uses: coursier/cache-action@v6
diff --git a/.github/workflows/run-tests.yml b/.github/workflows/run-tests.yml
index 46d61c82bb81..e8976e3ac74b 100644
--- a/.github/workflows/run-tests.yml
+++ b/.github/workflows/run-tests.yml
@@ -13,7 +13,7 @@
 #    runs-on: ubuntu-latest
 ##    runs-on: windows-latest
 #    steps:
-#      - uses: actions/checkout@v4
+#      - uses: actions/checkout@v5
 #        with: { fetch-depth: 1 }
 #
 #      - run: "echo temurin:11 > .mill-jvm-version"
@@ -76,7 +76,7 @@ jobs:
     if: (github.event.action == 'ready_for_review') || (github.event.pull_request.draft == false)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with: { fetch-depth: 1 }
 
       - run: ./mill -i website.fastPages + website.checkBrokenLinks
@@ -101,7 +101,7 @@ jobs:
             millargs: "'example.thirdparty[{jimfs,commons-io}].native.daemon'"
             java-version: 24
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with: { fetch-depth: 1 }
 
       - uses: ./.github/actions/pre-build-setup