diff --git a/.github/workflows/percy-baseline.yml b/.github/workflows/percy-baseline.yml
index 320f43861..eea6ab536 100644
--- a/.github/workflows/percy-baseline.yml
+++ b/.github/workflows/percy-baseline.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout SCM
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - uses: ./.github/actions/percy-snapshot
         with:
diff --git a/.github/workflows/percy-prepare.yml b/.github/workflows/percy-prepare.yml
index 25138f468..34750dbcd 100644
--- a/.github/workflows/percy-prepare.yml
+++ b/.github/workflows/percy-prepare.yml
@@ -21,7 +21,7 @@ jobs:
     steps:
       # Checkout only the files that are needed for visual testing and safe for the snapshots workflow to run
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           sparse-checkout: |
             templates/docs/examples/
diff --git a/.github/workflows/pr-percy-snapshots.yml b/.github/workflows/pr-percy-snapshots.yml
index 7840cf811..7edb5d0ca 100644
--- a/.github/workflows/pr-percy-snapshots.yml
+++ b/.github/workflows/pr-percy-snapshots.yml
@@ -23,7 +23,7 @@ jobs:
     steps:
       # Checkout `main` branch of Vanilla
       - name: Checkout SCM
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Remove SCM directories that will be replaced by artifact files
         run: rm -rf templates/docs/examples/ templates/_macros/ tokens/ sd.config.json scss/
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 1e49410c0..77d98b9f8 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -11,7 +11,7 @@ jobs:
     name: Test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-node@v4
         with:
           node-version: 18
@@ -29,7 +29,7 @@ jobs:
     name: linkchecker
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Build Docker image
         run: DOCKER_BUILDKIT=1 docker build --build-arg BUILD_ID=test --tag testrun .
       - name: Run server with Docker
@@ -45,7 +45,7 @@ jobs:
     name: Cypress
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Build Docker image
         run: DOCKER_BUILDKIT=1 docker build --build-arg BUILD_ID=test --tag testrun .
       - name: Run server with Docker
@@ -62,7 +62,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Check inclusive naming
         uses: canonical/inclusive-naming@main
diff --git a/.github/workflows/publish-on-release.yml b/.github/workflows/publish-on-release.yml
index d1fae3d08..ab8b53b6a 100644
--- a/.github/workflows/publish-on-release.yml
+++ b/.github/workflows/publish-on-release.yml
@@ -9,7 +9,7 @@ jobs:
     name: Build Vanilla
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-node@v4
         with:
           node-version: 18
@@ -33,7 +33,7 @@ jobs:
     needs: build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-node@v4
         with:
           node-version: 12
@@ -53,7 +53,7 @@ jobs:
     needs: [build, publish-npm]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/download-artifact@v6
         with:
           name: css
diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml
index e4ed60b7e..877329cf4 100644
--- a/.github/workflows/release-drafter.yml
+++ b/.github/workflows/release-drafter.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           # Only need package.json as it is used by the get_version step to pass tag number into release-drafter
           sparse-checkout: package.json