diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index b5fd018d7b..30b8ea6d67 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -26,7 +26,7 @@ jobs:
       GH_TOKEN: ${{ github.token }}
     steps:
       - name: Checkout nns-dapp
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Skip build for testing
         # Set to true and set a recent `run_id` below to reuse an existing build
         # instead of building.
@@ -80,7 +80,7 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout nns-dapp
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Run Playwright e2e test shard 1/2
         uses: ./.github/actions/test-e2e
         with:
@@ -92,7 +92,7 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout nns-dapp
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Run Playwright e2e test shard 2/2
         uses: ./.github/actions/test-e2e
         with:
@@ -104,7 +104,7 @@ jobs:
     timeout-minutes: 40
     steps:
       - name: Checkout nns-dapp
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Get nns-dapp_test
         # Note: This may be performed manually with ./scripts/docker-build --network local
         uses: actions/download-artifact@v6
@@ -127,7 +127,7 @@ jobs:
     timeout-minutes: 40
     steps:
       - name: Checkout nns-dapp
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Get nns-dapp_test
         uses: actions/download-artifact@v6
         with:
@@ -157,7 +157,7 @@ jobs:
     timeout-minutes: 40
     steps:
       - name: Checkout nns-dapp
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Get nns-dapp_test
         uses: actions/download-artifact@v6
         with:
@@ -177,7 +177,7 @@ jobs:
     timeout-minutes: 40
     steps:
       - name: Checkout nns-dapp
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Get nns-dapp
         uses: actions/download-artifact@v6
         with:
@@ -295,7 +295,7 @@ jobs:
     timeout-minutes: 45
     steps:
       - name: Checkout nns-dapp
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - name: Check dockerfile for changes
@@ -361,7 +361,7 @@ jobs:
     timeout-minutes: 60
     steps:
       - name: Checkout nns-dapp
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Get sns_aggregator_dev
         uses: actions/download-artifact@v6
         with:
@@ -465,7 +465,7 @@ jobs:
     needs: build
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Get docker build outputs
         uses: actions/download-artifact@v6
         with:
@@ -536,7 +536,7 @@ jobs:
     if: ${{ always() }}
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: ./.github/actions/needs_success
         with:
           needs: '${{ toJson(needs) }}'
diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
index 5483ae4a3a..bdd4a9f50c 100644
--- a/.github/workflows/checks.yml
+++ b/.github/workflows/checks.yml
@@ -14,7 +14,7 @@ jobs:
       DFX_NETWORK: mainnet
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Get cargo sort version
         run: jq -r '"CARGO_SORT_VERSION=\(.defaults.build.config.CARGO_SORT_VERSION)"' config.json >> $GITHUB_ENV
       - name: Get node version
@@ -43,14 +43,14 @@ jobs:
       DFX_NETWORK: mainnet
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Checks for the presence of relative imports
         run: ./scripts/check-relative-imports
   spelling:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Install spellcheck
         run: |
           sudo apt-get update
@@ -63,7 +63,7 @@ jobs:
   cargo-tests:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/cache@v4
         with:
           path: |
@@ -85,7 +85,7 @@ jobs:
     runs-on: ubuntu-latest-m
     steps:
       - name: Checkout nns-dapp
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Run vitest shard 1/2
         uses: ./.github/actions/vitest
         with:
@@ -95,7 +95,7 @@ jobs:
     runs-on: ubuntu-latest-m
     steps:
       - name: Checkout nns-dapp
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Run vitest shard 2/2
         uses: ./.github/actions/vitest
         with:
@@ -110,7 +110,7 @@ jobs:
       DFX_NETWORK: mainnet
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Get node version
         run: jq -r '"NODE_VERSION=\(.defaults.build.config.NODE_VERSION)"' config.json >> $GITHUB_ENV
       - uses: actions/setup-node@v6
@@ -126,7 +126,7 @@ jobs:
     name: ShellCheck
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Run ShellCheck
         run: |
           sudo apt-get update
@@ -136,7 +136,7 @@ jobs:
     name: IC Commit
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Install didc
         run: scripts/install-didc
       - name: Check didc
@@ -160,7 +160,7 @@ jobs:
     name: Release template
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - name: Install didc
@@ -182,7 +182,7 @@ jobs:
     name: Config is as expected
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Install dfx
         uses: dfinity/setup-dfx@main
       - name: Install cargo binstall
@@ -196,7 +196,7 @@ jobs:
     name: Migration test utilities work
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Install cargo binstall
         uses: ./.github/actions/install_binstall
       - name: Install idl2json
@@ -211,7 +211,7 @@ jobs:
     name: Can get NNS proposal args
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Install didc
         run: scripts/install-didc
       - name: Install cargo binstall
@@ -227,7 +227,7 @@ jobs:
   minor-version-bump-works:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Install yq
         run: sudo snap install yq
       - name: Install sponge
@@ -259,7 +259,7 @@ jobs:
     name: The nns-dapp npm and cargo versions should match
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Backend and frontend have the same version
         run: |
           backend_version="$(cargo metadata | jq -r '.packages[] | select(.name == "nns-dapp").version')"
@@ -280,7 +280,7 @@ jobs:
       # Used by download-ci-wasm.test
       GH_TOKEN: ${{ github.token }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Install tools on Linux
         run: |
           if command -v apt-get; then
@@ -364,7 +364,7 @@ jobs:
     if: ${{ always() }}
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: ./.github/actions/needs_success
         with:
           needs: "${{ toJson(needs) }}"
diff --git a/.github/workflows/deploy-to-app.yaml b/.github/workflows/deploy-to-app.yaml
index edbb45988d..a6ed2b0504 100644
--- a/.github/workflows/deploy-to-app.yaml
+++ b/.github/workflows/deploy-to-app.yaml
@@ -35,7 +35,7 @@ jobs:
       DFX_WARNING: -mainnet_plaintext_identity
     steps:
       - name: Checkout nns-dapp
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         # TODO: This builds, it doesn't use a release.  We probably want at least the option of using releases.
       - name: Get versions
         id: tool_versions
diff --git a/.github/workflows/docker-main.yaml b/.github/workflows/docker-main.yaml
index 591f6beaad..93f57bc8db 100644
--- a/.github/workflows/docker-main.yaml
+++ b/.github/workflows/docker-main.yaml
@@ -23,7 +23,7 @@ jobs:
   builder:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       # We use `buildx` and its GitHub Actions caching support `type=gha`. For
       # more information, see
       # https://github.com/docker/build-push-action/issues/539
diff --git a/.github/workflows/nightly.yaml b/.github/workflows/nightly.yaml
index f8981e66b3..1827901dbc 100644
--- a/.github/workflows/nightly.yaml
+++ b/.github/workflows/nightly.yaml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Preflight checks
         id: preflight
         run: |
@@ -53,7 +53,7 @@ jobs:
     if: ${{ always() }}
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: ./.github/actions/needs_success
         with:
           needs: '${{ toJson(needs) }}'
diff --git a/.github/workflows/reproducible.yaml b/.github/workflows/reproducible.yaml
index 91e71e892a..1de35734bc 100644
--- a/.github/workflows/reproducible.yaml
+++ b/.github/workflows/reproducible.yaml
@@ -40,7 +40,7 @@ jobs:
       - uses: docker-practice/actions-setup-docker@master
         timeout-minutes: 12
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       # Helps with debugging
       - name: Show versions
         run: |
@@ -100,7 +100,7 @@ jobs:
     if: ${{ always() }}
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: ./.github/actions/needs_success
         with:
           needs: '${{ toJson(needs) }}'
diff --git a/.github/workflows/tag.yaml b/.github/workflows/tag.yaml
index a4f5bb4ace..ec6243d3d1 100644
--- a/.github/workflows/tag.yaml
+++ b/.github/workflows/tag.yaml
@@ -14,7 +14,7 @@ jobs:
     if: github.event.pull_request.merged
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Tag main as tip
         run: |
           git tag -f tip
diff --git a/.github/workflows/update-aggregator.yml b/.github/workflows/update-aggregator.yml
index 4d3326f5ed..20382cc90d 100644
--- a/.github/workflows/update-aggregator.yml
+++ b/.github/workflows/update-aggregator.yml
@@ -20,7 +20,7 @@ jobs:
         with:
           app-id: ${{ vars.PR_AUTOMATION_BOT_PUBLIC_APP_ID }}
           private-key: ${{ secrets.PR_AUTOMATION_BOT_PUBLIC_PRIVATE_KEY }}
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Install didc
         run: scripts/install-didc
       - name: Find newer IC release, if any
diff --git a/.github/workflows/update-didc.yml b/.github/workflows/update-didc.yml
index 581ad9c83d..4bc1f03e53 100644
--- a/.github/workflows/update-didc.yml
+++ b/.github/workflows/update-didc.yml
@@ -16,7 +16,7 @@ jobs:
         with:
           app-id: ${{ vars.PR_AUTOMATION_BOT_PUBLIC_APP_ID }}
           private-key: ${{ secrets.PR_AUTOMATION_BOT_PUBLIC_PRIVATE_KEY }}
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         # First, check `didc` releases (on the candid repo) for a new version.
       - name: Check new didc version
         id: update
diff --git a/.github/workflows/update-ic-cargo-deps.yaml b/.github/workflows/update-ic-cargo-deps.yaml
index 0fd5261935..84c70d8aae 100644
--- a/.github/workflows/update-ic-cargo-deps.yaml
+++ b/.github/workflows/update-ic-cargo-deps.yaml
@@ -15,7 +15,7 @@ jobs:
         with:
           app-id: ${{ vars.PR_AUTOMATION_BOT_PUBLIC_APP_ID }}
           private-key: ${{ secrets.PR_AUTOMATION_BOT_PUBLIC_PRIVATE_KEY }}
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Find latest IC release
         id: latest
         run: |
diff --git a/.github/workflows/update-next.yml b/.github/workflows/update-next.yml
index 932b86a26a..2b7ba4d104 100644
--- a/.github/workflows/update-next.yml
+++ b/.github/workflows/update-next.yml
@@ -22,7 +22,7 @@ jobs:
         with:
           app-id: ${{ vars.PR_AUTOMATION_BOT_PUBLIC_APP_ID }}
           private-key: ${{ secrets.PR_AUTOMATION_BOT_PUBLIC_PRIVATE_KEY }}
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Get node version
         run: jq -r '"NODE_VERSION=\(.defaults.build.config.NODE_VERSION)"' config.json >> $GITHUB_ENV
       - name: Set up Node.js
diff --git a/.github/workflows/update-proposals.yml b/.github/workflows/update-proposals.yml
index fa0e5e3b38..20efe52fe8 100644
--- a/.github/workflows/update-proposals.yml
+++ b/.github/workflows/update-proposals.yml
@@ -20,7 +20,7 @@ jobs:
         with:
           app-id: ${{ vars.PR_AUTOMATION_BOT_PUBLIC_APP_ID }}
           private-key: ${{ secrets.PR_AUTOMATION_BOT_PUBLIC_PRIVATE_KEY }}
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Install didc
         run: scripts/install-didc
       - name: Find newer IC release, if any
diff --git a/.github/workflows/update-rust.yml b/.github/workflows/update-rust.yml
index fac5e65075..b3d09348f3 100644
--- a/.github/workflows/update-rust.yml
+++ b/.github/workflows/update-rust.yml
@@ -20,7 +20,7 @@ jobs:
         with:
           app-id: ${{ vars.PR_AUTOMATION_BOT_PUBLIC_APP_ID }}
           private-key: ${{ secrets.PR_AUTOMATION_BOT_PUBLIC_PRIVATE_KEY }}
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         # First, check rust GitHub releases for a new version. We assume that the
         # latest version's tag name is the version.
       - name: Install yq
diff --git a/.github/workflows/update-sns-aggregator-response.yml b/.github/workflows/update-sns-aggregator-response.yml
index d06ac4d738..ceb2a6b5cf 100644
--- a/.github/workflows/update-sns-aggregator-response.yml
+++ b/.github/workflows/update-sns-aggregator-response.yml
@@ -19,7 +19,7 @@ jobs:
         with:
           app-id: ${{ vars.PR_AUTOMATION_BOT_PUBLIC_APP_ID }}
           private-key: ${{ secrets.PR_AUTOMATION_BOT_PUBLIC_PRIVATE_KEY }}
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Update the SNS aggregator response files
         run: scripts/nns-dapp/replace-sns-aggregator-response.sh
       - name: Get node version
diff --git a/.github/workflows/update-snsdemo.yml b/.github/workflows/update-snsdemo.yml
index 2a34f3d109..194fece54f 100644
--- a/.github/workflows/update-snsdemo.yml
+++ b/.github/workflows/update-snsdemo.yml
@@ -20,7 +20,7 @@ jobs:
         with:
           app-id: ${{ vars.PR_AUTOMATION_BOT_PUBLIC_APP_ID }}
           private-key: ${{ secrets.PR_AUTOMATION_BOT_PUBLIC_PRIVATE_KEY }}
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Update to match the snsdemo repo
         id: update
         run: |
@@ -38,7 +38,7 @@ jobs:
             fi
           } >> "$GITHUB_OUTPUT"
       - name: Get snsdemo repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         if: ${{ steps.update.outputs.updated == '1' }}
         with:
           repository: "dfinity/snsdemo"