diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 2b69f2f..d44fb47 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -24,7 +24,7 @@ jobs:
   check:
     runs-on: [self-hosted, on-prem]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
       # Derive NX_BASE / NX_HEAD for `nx affected`. Replaces
@@ -56,7 +56,7 @@ jobs:
   scan:
     runs-on: [self-hosted, on-prem]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: pnpm/action-setup@v3
       - uses: actions/setup-node@v4
         with:
@@ -85,7 +85,7 @@ jobs:
     if: github.event_name == 'pull_request' && github.event.pull_request.user.login != 'apf-portal-bot'
     runs-on: [self-hosted, on-prem]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - uses: pnpm/action-setup@v3
@@ -111,7 +111,7 @@ jobs:
     container:
       image: catthehacker/ubuntu:full-22.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: pnpm/action-setup@v3
       - uses: actions/setup-node@v4
         with:
@@ -128,7 +128,7 @@ jobs:
   a11y:
     runs-on: [self-hosted, on-prem]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: pnpm/action-setup@v3
       - uses: actions/setup-node@v4
         with:
diff --git a/.gitea/workflows/security-scheduled.yml b/.gitea/workflows/security-scheduled.yml
index 7790c8c..5bd1156 100644
--- a/.gitea/workflows/security-scheduled.yml
+++ b/.gitea/workflows/security-scheduled.yml
@@ -15,7 +15,7 @@ jobs:
   full-tree-scan:
     runs-on: [self-hosted, on-prem]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: pnpm/action-setup@v3
       - uses: actions/setup-node@v4
         with:
@@ -39,7 +39,7 @@ jobs:
     if: vars.LHCI_PROD_URL != ''
     runs-on: [self-hosted, on-prem]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: pnpm/action-setup@v3
       - uses: actions/setup-node@v4
         with: