diff --git a/.github/workflows/ci-staging.yml b/.github/workflows/ci-staging.yml
index 4174ada..3cbba91 100644
--- a/.github/workflows/ci-staging.yml
+++ b/.github/workflows/ci-staging.yml
@@ -10,14 +10,14 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: shivammathur/setup-php@v2
         with:
           php-version: '8.3'
           coverage: none
       - run: composer install --no-interaction --prefer-dist --no-progress
       - run: cp .env.example .env && php artisan key:generate
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v5
         with:
           node-version: '20'
       - run: npm ci
diff --git a/.github/workflows/promote-public.yml b/.github/workflows/promote-public.yml
index 9517322..da6ff4c 100644
--- a/.github/workflows/promote-public.yml
+++ b/.github/workflows/promote-public.yml
@@ -15,13 +15,13 @@ jobs:
     environment: production
     steps:
       - name: Checkout private repo at the tag
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ inputs.tag }}
           fetch-depth: 0
           path: src
       - name: Checkout public repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           repository: ${{ vars.PUBLIC_REPO_SLUG }}
           token: ${{ secrets.PUBLIC_REPO_TOKEN }}
diff --git a/.github/workflows/promote-stable.yml b/.github/workflows/promote-stable.yml
index 8bfbd14..9a08658 100644
--- a/.github/workflows/promote-stable.yml
+++ b/.github/workflows/promote-stable.yml
@@ -18,7 +18,7 @@ jobs:
     environment: production
     steps:
       - name: Checkout private repo at the beta tag
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ inputs.betaTag }}
           fetch-depth: 0
@@ -27,7 +27,7 @@ jobs:
         run: |
           git -C src tag "${{ inputs.stableTag }}" "${{ inputs.betaTag }}^{commit}"
       - name: Checkout public repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           repository: ${{ vars.PUBLIC_REPO_SLUG }}
           token: ${{ secrets.PUBLIC_REPO_TOKEN }}
diff --git a/.github/workflows/yank.yml b/.github/workflows/yank.yml
index 9e15293..541737d 100644
--- a/.github/workflows/yank.yml
+++ b/.github/workflows/yank.yml
@@ -21,7 +21,7 @@ jobs:
           echo "$TAG" | grep -qE '^v[0-9]+\.[0-9]+\.[0-9]+(-beta[0-9]+)?$' \
             || { echo "refusing to yank an unrecognised tag: $TAG" >&2; exit 1; }
       - name: Checkout public repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           repository: ${{ vars.PUBLIC_REPO_SLUG }}
           token: ${{ secrets.PUBLIC_REPO_TOKEN }}