diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 30978b04..93eb708f 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -8,7 +8,7 @@ jobs:
   build-custom-packages:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: DeterminateSystems/magic-nix-cache-action@v2
       - uses: DeterminateSystems/nix-installer-action@v4
         with:
diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index 3c822033..1aa84e29 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -11,7 +11,7 @@ jobs:
   check-outputs:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: DeterminateSystems/nix-installer-action@v4
       - name: Check flake lockfile
         uses: DeterminateSystems/flake-checker-action@v5
diff --git a/.github/workflows/flakehub-push.yml b/.github/workflows/flakehub-push.yml
index 330e627b..0224e6b7 100644
--- a/.github/workflows/flakehub-push.yml
+++ b/.github/workflows/flakehub-push.yml
@@ -10,7 +10,7 @@ jobs:
       id-token: "write"
       contents: "read"
     steps:
-      - uses: "actions/checkout@v3"
+      - uses: "actions/checkout@v4"
       - uses: "DeterminateSystems/nix-installer-action@main"
       - uses: "DeterminateSystems/flakehub-push@main"
         with:
diff --git a/.github/workflows/iso.yml b/.github/workflows/iso.yml
index 27a914db..f7b76587 100644
--- a/.github/workflows/iso.yml
+++ b/.github/workflows/iso.yml
@@ -13,7 +13,7 @@ jobs:
           - "x86_64-linux"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: DeterminateSystems/magic-nix-cache-action@v2
       - uses: DeterminateSystems/nix-installer-action@v4
       - name: Build ISO
diff --git a/.github/workflows/site.yml b/.github/workflows/site.yml
index 8d73f60e..bb931be2 100644
--- a/.github/workflows/site.yml
+++ b/.github/workflows/site.yml
@@ -8,7 +8,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: DeterminateSystems/magic-nix-cache-action@v2
       - uses: DeterminateSystems/nix-installer-action@v4
       - env:
diff --git a/.github/workflows/update-firefox-addons.yml b/.github/workflows/update-firefox-addons.yml
index 842aa17d..b39ce7c5 100644
--- a/.github/workflows/update-firefox-addons.yml
+++ b/.github/workflows/update-firefox-addons.yml
@@ -17,7 +17,7 @@ jobs:
       - name: Set the date
         id: metadata
         run: echo "DATE=$(date +%F)" >> "$GITHUB_OUTPUT"
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: DeterminateSystems/nix-installer-action@v4
       - env:
           NIXPKGS_ALLOW_UNFREE: "1"
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index 187da6ec..0f44ec6f 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -12,7 +12,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: DeterminateSystems/nix-installer-action@v4
       - name: Update flake inputs
         run: |