diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index c14601e..9739364 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -10,7 +10,7 @@ jobs:
   build:
     runs-on: nixos-x86_64-linux
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: ./.github/actions/setup
         with:
           components: api-token,attic,devshell
@@ -29,7 +29,7 @@ jobs:
     permissions:
       id-token: write # for AWS and Aliyun OIDC federation
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: ./.github/actions/setup
         with:
           components: api-token,attic,aws,devshell,terraform-cache
@@ -51,7 +51,7 @@ jobs:
     outputs:
       diff-hosts: ${{ steps.plan.outputs.diff-hosts }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: ./.github/actions/setup
         with:
           components: api-token,attic,ssh,aws,aliyun,devshell,terraform-cache
@@ -102,7 +102,7 @@ jobs:
     permissions:
       pull-requests: write # for updating the PR comment
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: ./.github/actions/setup
         with:
           components: api-token,attic,ssh,devshell
diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index df8edef..3eaddf0 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -18,7 +18,7 @@ jobs:
     outputs:
       diff: ${{ steps.plan.outputs.diff }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: ./.github/actions/setup
         with:
           components: api-token,attic,ssh,gpg,aws,aliyun,devshell,terraform-cache
@@ -38,7 +38,7 @@ jobs:
     needs: plan
     if: needs.plan.outputs.diff == 'true'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: ./.github/actions/setup
         with:
           components: api-token,attic,ssh,aws,aliyun,devshell,terraform-cache
diff --git a/.github/workflows/update-flake.yaml b/.github/workflows/update-flake.yaml
index d2fb158..10a809a 100644
--- a/.github/workflows/update-flake.yaml
+++ b/.github/workflows/update-flake.yaml
@@ -9,7 +9,7 @@ jobs:
   update-flake:
     runs-on: nixos-x86_64-linux
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: ./.github/actions/setup
         with:
           components: api-token,attic
diff --git a/.github/workflows/update-terraform.yaml b/.github/workflows/update-terraform.yaml
index a4dc2bb..e9c2dff 100644
--- a/.github/workflows/update-terraform.yaml
+++ b/.github/workflows/update-terraform.yaml
@@ -11,7 +11,7 @@ jobs:
     permissions:
       id-token: write # for AWS and Aliyun OIDC federation
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: ./.github/actions/setup
         with:
           components: api-token,attic,aws,devshell,terraform-cache