diff --git a/.github/workflows/cd.crates.yml b/.github/workflows/cd.crates.yml
index 8c70e98ea..38b085a4c 100644
--- a/.github/workflows/cd.crates.yml
+++ b/.github/workflows/cd.crates.yml
@@ -18,7 +18,7 @@ jobs:
     if: startsWith(github.event.release.tag_name || github.event.inputs.tag, 'v2')
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           ref: ${{ github.event.release.tag_name || github.event.inputs.tag }}
       - uses: dtolnay/rust-toolchain@stable
diff --git a/.github/workflows/cd.docker.yml b/.github/workflows/cd.docker.yml
index 6de94639f..85a41305d 100644
--- a/.github/workflows/cd.docker.yml
+++ b/.github/workflows/cd.docker.yml
@@ -72,7 +72,7 @@ jobs:
 
           curl -o products/pkgm https://pkgxdev.github.io/pkgm/pkgm.ts
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           path: src
 
diff --git a/.github/workflows/cd.vx.yml b/.github/workflows/cd.vx.yml
index d52b09db9..f7d89eed0 100644
--- a/.github/workflows/cd.vx.yml
+++ b/.github/workflows/cd.vx.yml
@@ -16,7 +16,7 @@ jobs:
   retag:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           ref: ${{ github.event.release.tag_name }}
       - uses: fischerscode/tagger@v0
diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 431ae736f..47408c7e0 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -20,7 +20,7 @@ jobs:
         os: [ubuntu-latest, macos-latest, windows-latest]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: dtolnay/rust-toolchain@stable
       - run: cargo test --all-features
         env:
@@ -32,7 +32,7 @@ jobs:
     env:
       FILENAME: pkgx-${{ github.event.inputs.version }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           path: ${{ env.FILENAME }}
       - name: clean
diff --git a/.github/workflows/ci.ca-cert.yml b/.github/workflows/ci.ca-cert.yml
index 5a3864aef..822cde562 100644
--- a/.github/workflows/ci.ca-cert.yml
+++ b/.github/workflows/ci.ca-cert.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     container: debian:buster-slim
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - run: apt-get update && apt-get install -y curl gcc perl make
       - uses: dtolnay/rust-toolchain@stable
       - run: cargo build --release
diff --git a/.github/workflows/ci.docker.yml b/.github/workflows/ci.docker.yml
index 4c5d820b0..d3b7ec31a 100644
--- a/.github/workflows/ci.docker.yml
+++ b/.github/workflows/ci.docker.yml
@@ -25,7 +25,7 @@ jobs:
           - debian
           - ubuntu
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - uses: robinraju/release-downloader@v1.12
         with:
diff --git a/.github/workflows/ci.md.yml b/.github/workflows/ci.md.yml
index acf47d8cf..2161b5a3c 100644
--- a/.github/workflows/ci.md.yml
+++ b/.github/workflows/ci.md.yml
@@ -14,7 +14,7 @@ jobs:
   markdownlint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: nosborn/github-action-markdown-cli@v3.4.0
         with:
           config_file: .github/markdownlint.yml
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 18ed7e2bb..9e6a7822c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -26,7 +26,7 @@ jobs:
   fmt:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: rustfmt
@@ -38,7 +38,7 @@ jobs:
         os: [ubuntu-latest, macos-latest, windows-latest]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: clippy
@@ -53,7 +53,7 @@ jobs:
         os: [ubuntu-latest, macos-latest]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: dtolnay/rust-toolchain@stable
       - run: cargo test --all-features
         env:
@@ -66,7 +66,7 @@ jobs:
         os: [ubuntu-latest, macos-latest, windows-latest]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: dtolnay/rust-toolchain@stable
       - uses: taiki-e/install-action@v2
         with:
@@ -87,7 +87,7 @@ jobs:
           - macos-latest
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - uses: dtolnay/rust-toolchain@stable
 
@@ -232,7 +232,7 @@ jobs:
     runs-on: ubuntu-latest
     container: debian:buster-slim
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - run: apt-get update && apt-get install -y curl make gcc perl
       - uses: dtolnay/rust-toolchain@stable
       - run: apt-get remove curl ca-certificates openssl --yes