diff --git a/.github/workflows/sync-about.yml b/.github/workflows/sync-about.yml
index 8d6e949d..6fc59fba 100644
--- a/.github/workflows/sync-about.yml
+++ b/.github/workflows/sync-about.yml
@@ -72,7 +72,7 @@ jobs:
       # any fix-up commit we make goes onto the PR branch itself. On
       # push events we check out the default ref. fetch-depth: 0 lets
       # us push back without "shallow update not allowed".
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
           ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.ref || github.ref }}
diff --git a/.github/workflows/sync-metadata.yml b/.github/workflows/sync-metadata.yml
index 57061bf6..d9c45e1e 100644
--- a/.github/workflows/sync-metadata.yml
+++ b/.github/workflows/sync-metadata.yml
@@ -14,7 +14,7 @@ jobs:
     name: metadata audit
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: actions/setup-python@v5
         with:
           python-version: "3.12"