diff --git a/.github/workflows/cd.installer.yml b/.github/workflows/cd.installer.yml
index ae46cb0..6fb0119 100644
--- a/.github/workflows/cd.installer.yml
+++ b/.github/workflows/cd.installer.yml
@@ -15,7 +15,7 @@ jobs:
     if: github.repository == 'pkgxdev/mash'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - uses: aws-actions/configure-aws-credentials@v4
         with:
diff --git a/.github/workflows/cd.www.yml b/.github/workflows/cd.www.yml
index 899f279..1789443 100644
--- a/.github/workflows/cd.www.yml
+++ b/.github/workflows/cd.www.yml
@@ -23,7 +23,7 @@ jobs:
     if: github.repository == 'pkgxdev/mash'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: pkgxdev/setup@v4
 
       - name: trawl
diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 3b7be24..355643b 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -17,7 +17,7 @@ jobs:
     if: github.repository == 'pkgxdev/mash'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: fischerscode/tagger@v0
         with:
           prefix: v
@@ -29,7 +29,7 @@ jobs:
     if: github.repository == 'pkgxdev/mash'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: version
         run: sed -i "s/mash 0.0.0-dev/mash ${{ github.event.release.tag_name }}/g" ./mash
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3923e9d..c76e9d6 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -9,7 +9,7 @@ jobs:
     if: github.repository == 'pkgxdev/mash'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: pkgxdev/setup@v4
       - run: ./mash demo test-pattern
       - run: ./mash demo test-pattern           # check cache route works too