diff --git a/.github/workflows/any-branch-uploads.yml b/.github/workflows/any-branch-uploads.yml
index 185e5763..727310bf 100644
--- a/.github/workflows/any-branch-uploads.yml
+++ b/.github/workflows/any-branch-uploads.yml
@@ -14,7 +14,7 @@ jobs:
     if: ${{ github.repository == 'p4lang/p4runtime' }}
     runs-on: [ubuntu-latest]
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v5
     - name: Build spec
       run: |
         make -C docs/tools/
diff --git a/.github/workflows/bazel-build.yml b/.github/workflows/bazel-build.yml
index 3053572f..b1bb5364 100644
--- a/.github/workflows/bazel-build.yml
+++ b/.github/workflows/bazel-build.yml
@@ -42,7 +42,7 @@ jobs:
       CACHE_KEY: ${{ matrix.os }}_bazel-${{ matrix.bazel_version }}
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       with:
         submodules: recursive
 
diff --git a/.github/workflows/codegen.yml b/.github/workflows/codegen.yml
index b750a503..a5dc7982 100644
--- a/.github/workflows/codegen.yml
+++ b/.github/workflows/codegen.yml
@@ -18,7 +18,7 @@ jobs:
   check-codegen:
     runs-on: [ubuntu-latest]
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v5
     - name: Compile protobufs
       run: |
         docker build -t p4runtime-ci -f codegen/Dockerfile .
diff --git a/.github/workflows/main-branch-uploads.yml b/.github/workflows/main-branch-uploads.yml
index 149e17c7..17fefafa 100644
--- a/.github/workflows/main-branch-uploads.yml
+++ b/.github/workflows/main-branch-uploads.yml
@@ -14,7 +14,7 @@ jobs:
     if: ${{ github.repository == 'p4lang/p4runtime' }}
     runs-on: [ubuntu-latest]
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v5
       with:
         # fetch all history for all branches and tags
         fetch-depth: 0
diff --git a/.github/workflows/spec.yml b/.github/workflows/spec.yml
index 69391d44..ffa6d6c2 100644
--- a/.github/workflows/spec.yml
+++ b/.github/workflows/spec.yml
@@ -30,7 +30,7 @@ jobs:
   asciidoc-lint:
     runs-on: [ubuntu-latest]
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v5
     - name: Run linter
       run: |
         ./tools/asciidoclint.py docs/v1/P4Runtime-Spec.adoc
@@ -38,7 +38,7 @@ jobs:
   build-spec:
     runs-on: [ubuntu-latest]
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v5
     - name: Build spec
       run: |
         make -C docs/tools/
diff --git a/.github/workflows/tag-uploads.yml b/.github/workflows/tag-uploads.yml
index fb21bc0e..5f50ce15 100644
--- a/.github/workflows/tag-uploads.yml
+++ b/.github/workflows/tag-uploads.yml
@@ -16,7 +16,7 @@ jobs:
     env:
       TAG: ${{ github.ref_name }}
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v5
       with:
         # fetch all history for all branches and tags
         fetch-depth: 0
@@ -58,7 +58,7 @@ jobs:
     if: ${{ github.repository == 'p4lang/p4runtime' }}
     runs-on: [ubuntu-latest]
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v5
     - name: Set up Python
       uses: actions/setup-python@v3
       with: