diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml
index f263084..c5b472a 100644
--- a/.github/workflows/benchmark.yml
+++ b/.github/workflows/benchmark.yml
@@ -36,7 +36,7 @@ jobs:
     env:
       BENCH_MODE: ${{ (github.event_name == 'schedule' || (github.event_name == 'workflow_dispatch' && inputs.mode == 'comparison')) && 'comparison' || 'regression' }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - uses: mlugg/setup-zig@v2
         with:
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1a50b93..8fda532 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -22,7 +22,7 @@ jobs:
       matrix:
         runner: [ubuntu-latest, macos-latest, windows-latest]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: mlugg/setup-zig@v2
         with:
           version: 0.15.2
@@ -32,7 +32,7 @@ jobs:
     name: Lint installers
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       # Match the PSScriptAnalyzer filter below: warnings + errors only.
       # Info/style findings (e.g. SC2016 on intentional `$PATH` literals in
       # rc-snippet `printf`s) are not actionable lint failures.
@@ -78,7 +78,7 @@ jobs:
             runner: ubuntu-latest
             optimize: ReleaseSafe
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: mlugg/setup-zig@v2
         with:
           version: 0.15.2
@@ -125,7 +125,7 @@ jobs:
           - target: x86_64-freebsd
             rust-target: x86_64-unknown-freebsd
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: mlugg/setup-zig@v2
         with:
           version: 0.15.2
diff --git a/.github/workflows/nix.yml b/.github/workflows/nix.yml
index b603a45..22cec75 100644
--- a/.github/workflows/nix.yml
+++ b/.github/workflows/nix.yml
@@ -14,7 +14,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: cachix/install-nix-action@v31
         with:
           extra_nix_config: |
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 168c597..91bf7f2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -36,7 +36,7 @@ jobs:
           - { target: aarch64-windows, os: windows, arch: arm64, ext: zip,    rust-target: aarch64-pc-windows-gnullvm }
           - { target: x86_64-freebsd,  os: freebsd, arch: amd64, ext: tar.gz, rust-target: x86_64-unknown-freebsd }
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: mlugg/setup-zig@v2
         with:
           version: 0.15.2
@@ -88,7 +88,7 @@ jobs:
       # Required to create the GitHub release + upload assets.
       contents: write
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Download artifacts
         uses: actions/download-artifact@v8
@@ -148,7 +148,7 @@ jobs:
       id-token: write
     environment: npm-publish
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-node@v6
         with:
           node-version: '22'
@@ -174,7 +174,7 @@ jobs:
       contents: read
       packages: write
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Download Linux artifacts
         uses: actions/download-artifact@v8
@@ -270,7 +270,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Prepare PKGBUILD
         run: |