diff --git a/.github/workflows/cache_java.yml b/.github/workflows/cache_java.yml
index dcd546d5..21a19192 100644
--- a/.github/workflows/cache_java.yml
+++ b/.github/workflows/cache_java.yml
@@ -148,7 +148,7 @@ jobs:
       matrix:
         java_variant: [ "8", "8-orcl", "8-zing", "8-j9", "8-ibm", "11", "11-zing", "11-j9", "17", "17-zing", "17-j9", "17-graal", "21", "21-j9", "21-zing", "21-graal", "25", "25-graal" ]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
       - name: Try restore cache JDK ${{ matrix.java_variant }}
         id: cache-jdk
         uses: actions/cache/restore@v4
@@ -207,7 +207,7 @@ jobs:
       matrix:
         java_variant: [ "8-librca", "11-librca", "17-librca", "21-librca", "25-librca" ]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
       - name: Setup OS
         run: |
           # This needs to be done early because alpine does not have bash and tar is also iffy
@@ -257,7 +257,7 @@ jobs:
       matrix:
         java_variant: [ "8", "8-zing", "8-j9", "11", "11-zing", "11-j9", "17", "17-zing", "17-j9", "17-graal", "21", "21-j9", "21-zing", "21-graal", "25", "25-graal" ]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
       - name: Cache JDK ${{ matrix.java_variant }}
         id: cache-jdk
         uses: actions/cache/restore@v4
@@ -314,7 +314,7 @@ jobs:
       matrix:
         java_variant: [ "8-librca", "11-librca", "17-librca", "21-librca", "25-librca" ]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
       - name: Setup OS
         run: |
           # This needs to be done early because alpine does not have bash and tar is also iffy
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0f0c9000..22f3df36 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -46,7 +46,7 @@ jobs:
     needs: check-for-pr
     if: needs.check-for-pr.outputs.skip != 'true'
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
 
       - name: Setup Java
         uses: actions/setup-java@v3
@@ -87,7 +87,7 @@ jobs:
     needs: check-for-pr
     if: needs.check-for-pr.outputs.skip != 'true'
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
 
       - name: Setup Java
         uses: actions/setup-java@v3
@@ -178,7 +178,7 @@ jobs:
       actions: read
       id-token: write
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
 
       - name: Generate test summary
         env:
diff --git a/.github/workflows/codecheck.yml b/.github/workflows/codecheck.yml
index 4643f2d9..5af83d7c 100644
--- a/.github/workflows/codecheck.yml
+++ b/.github/workflows/codecheck.yml
@@ -21,7 +21,7 @@ jobs:
     env:
       HEAD_REF: ${{ github.head_ref }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
       - name: System setup
         run: |
           sudo apt-get update
@@ -71,7 +71,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v6
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
diff --git a/.github/workflows/gh_release.yml b/.github/workflows/gh_release.yml
index 1ee0336e..6d83b58f 100644
--- a/.github/workflows/gh_release.yml
+++ b/.github/workflows/gh_release.yml
@@ -26,7 +26,7 @@ jobs:
     if: (startsWith(github.event.ref, 'refs/tags/v_') || inputs.release_tag != '') && !endsWith(github.event.ref, '-SNAPSHOT')
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - uses: webfactory/ssh-agent@v0.9.1
diff --git a/.github/workflows/release-validated.yml b/.github/workflows/release-validated.yml
index 9d60f9fc..ca5317ca 100644
--- a/.github/workflows/release-validated.yml
+++ b/.github/workflows/release-validated.yml
@@ -36,7 +36,7 @@ jobs:
       release_branch: ${{ steps.compute-version.outputs.release_branch }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/test_workflow.yml b/.github/workflows/test_workflow.yml
index df82c620..bd666132 100644
--- a/.github/workflows/test_workflow.yml
+++ b/.github/workflows/test_workflow.yml
@@ -50,7 +50,7 @@ jobs:
               echo "enabled=false" >> $GITHUB_OUTPUT
             fi
           fi
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
         if: steps.set_enabled.outputs.enabled == 'true'
       - name: Cache Gradle Wrapper Binaries
         if: steps.set_enabled.outputs.enabled == 'true'
@@ -166,7 +166,7 @@ jobs:
           apk update && apk add curl moreutils wget hexdump linux-headers bash make g++ clang git cppcheck jq cmake gtest-dev gmock tar binutils >/dev/null
           # Install debug symbols for musl libc
           apk add musl-dbg
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
       - name: Cache Gradle Wrapper Binaries
         uses: actions/cache@v4
         with:
@@ -285,7 +285,7 @@ jobs:
               echo "enabled=false" >> $GITHUB_OUTPUT
             fi
           fi
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
         if: steps.set_enabled.outputs.enabled == 'true'
       - name: Cache Gradle Wrapper Binaries
         if: steps.set_enabled.outputs.enabled == 'true'
@@ -397,7 +397,7 @@ jobs:
        labels: arm-4core-linux-ubuntu24.04
      timeout-minutes: 180
      steps:
-       - uses: actions/checkout@v3
+       - uses: actions/checkout@v6
        - name: Cache Gradle Wrapper Binaries
          uses: actions/cache@v4
          with:
diff --git a/.github/workflows/upstream-tracker.yml b/.github/workflows/upstream-tracker.yml
index 965159f3..00a12380 100644
--- a/.github/workflows/upstream-tracker.yml
+++ b/.github/workflows/upstream-tracker.yml
@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
 
       - name: Setup git
         run: |