diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c1b00160ea..c8ece09957 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -21,7 +21,7 @@ jobs:
         name: Tests
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@v6
 
             - run: npm install
 
diff --git a/.github/workflows/dnscontrol.yml b/.github/workflows/dnscontrol.yml
index d9f8cb121e..03b5274d15 100644
--- a/.github/workflows/dnscontrol.yml
+++ b/.github/workflows/dnscontrol.yml
@@ -17,7 +17,7 @@ jobs:
         name: Tests
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@v6
 
             - uses: is-a-dev/dnscontrol-action@main
               with:
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 2bddab7e21..a6e03814b4 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -19,7 +19,7 @@ jobs:
         name: DNS
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@v6
 
             - name: Generate creds.json
               run: echo '{"cloudflare":{"TYPE":"CLOUDFLAREAPI","apitoken":"$CLOUDFLARE_API_TOKEN"}}' > ./creds.json
diff --git a/.github/workflows/raw-api.yml b/.github/workflows/raw-api.yml
index 42d4a73da5..9fedba413d 100644
--- a/.github/workflows/raw-api.yml
+++ b/.github/workflows/raw-api.yml
@@ -21,9 +21,9 @@ jobs:
         runs-on: ubuntu-latest
 
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@v6
 
-            - uses: actions/setup-node@v4
+            - uses: actions/setup-node@v6
               with:
                   node-version: 20.x
 
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 3b8c26c511..a27c0ecca6 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -11,7 +11,7 @@ jobs:
         name: Label
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/stale@v3
+            - uses: actions/stale@v10
               with:
                   repo-token: ${{ secrets.GITHUB_TOKEN }}
                   days-before-stale: 3