diff --git a/.github/workflows/automatic-api-update.yaml b/.github/workflows/automatic-api-update.yaml
index 4bf4296..5210ebf 100644
--- a/.github/workflows/automatic-api-update.yaml
+++ b/.github/workflows/automatic-api-update.yaml
@@ -9,7 +9,7 @@ jobs:
     timeout-minutes: 10
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-node@v6
       - uses: bahmutov/npm-install@v1
         with:
@@ -35,7 +35,7 @@ jobs:
         if: steps.buf-update.outputs.updated == 'true'
         run: "yarn run buf"
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7.0.8
+        uses: peter-evans/create-pull-request@v7.0.9
         if: steps.buf-update.outputs.updated == 'true'
         with:
           delete-branch: "true"
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 7639f5d..58e9fd2 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -14,7 +14,7 @@ jobs:
     name: "Lint"
     runs-on: "depot-ubuntu-24.04-small"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "bahmutov/npm-install@v1"
         with:
           useLockFile: false
@@ -28,5 +28,5 @@ jobs:
     runs-on: "depot-ubuntu-24.04-small"
     if: "github.event_name == 'pull_request' && (github.event.action == 'opened' || github.event.action == 'synchronize' || github.event.action == 'reopened' || github.event.action == 'edited')"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "webiny/action-conventional-commits@v1.3.0"
diff --git a/.github/workflows/manual-api-update.yaml b/.github/workflows/manual-api-update.yaml
index ecbc6ea..9d328dd 100644
--- a/.github/workflows/manual-api-update.yaml
+++ b/.github/workflows/manual-api-update.yaml
@@ -13,7 +13,7 @@ jobs:
     timeout-minutes: 10
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-node@v6
       - name: "Update Buf Script"
         id: buf-update
@@ -36,7 +36,7 @@ jobs:
         if: steps.buf-update.outputs.updated == 'true'
         run: "buf generate"
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7.0.8
+        uses: peter-evans/create-pull-request@v7.0.9
         if: steps.buf-update.outputs.updated == 'true'
         with:
           delete-branch: "true"
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 259e760..12aec34 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -11,7 +11,7 @@ jobs:
     name: Publish to NPM
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-node@v6
         with:
           cache-dependency-path: ./package.json
@@ -39,7 +39,7 @@ jobs:
     name: Publish JS client to NPM
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-node@v6
         with:
           node-version: 18
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 68ec786..feedcfb 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -13,7 +13,7 @@ jobs:
     outputs:
       codechange: "${{ steps.code-filter.outputs.codechange }}"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "dorny/paths-filter@v3"
         id: "code-filter"
         with:
@@ -34,7 +34,7 @@ jobs:
     if: |
       needs.paths-filter.outputs.codechange == 'true'
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "authzed/action-spicedb@v1"
         with:
           version: "latest"
@@ -58,7 +58,7 @@ jobs:
     if: |
       needs.paths-filter.outputs.codechange == 'true'
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: "authzed/action-spicedb@v1"
         with:
           version: "latest"