diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3d941a4..16d8942 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -22,7 +22,7 @@ jobs:
     name: hello
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - run: echo "CI scaffold in place. Add real jobs as code arrives."
 
   # ── Uncomment as the codebase grows ────────────────────────────────────────
@@ -34,7 +34,7 @@ jobs:
   #     run:
   #       working-directory: frontend
   #   steps:
-  #     - uses: actions/checkout@v4
+  #     - uses: actions/checkout@v6
   #     - uses: actions/setup-node@v4
   #       with:
   #         node-version: "20"
@@ -53,7 +53,7 @@ jobs:
   #     run:
   #       working-directory: backend
   #   steps:
-  #     - uses: actions/checkout@v4
+  #     - uses: actions/checkout@v6
   #     - uses: actions/setup-go@v5
   #       with:
   #         go-version: "1.22"
@@ -67,7 +67,7 @@ jobs:
   #   runs-on: ubuntu-latest
   #   needs: [backend]
   #   steps:
-  #     - uses: actions/checkout@v4
+  #     - uses: actions/checkout@v6
   #     - uses: docker/setup-buildx-action@v3
   #     - uses: docker/build-push-action@v6
   #       with:
@@ -80,7 +80,7 @@ jobs:
   #   runs-on: ubuntu-latest
   #   needs: [docker-build]
   #   steps:
-  #     - uses: actions/checkout@v4
+  #     - uses: actions/checkout@v6
   #     - uses: aquasecurity/trivy-action@0.20.0
   #       with:
   #         scan-type: "fs"
@@ -92,7 +92,7 @@ jobs:
   #   name: Semgrep SAST
   #   runs-on: ubuntu-latest
   #   steps:
-  #     - uses: actions/checkout@v4
+  #     - uses: actions/checkout@v6
   #     - uses: returntocorp/semgrep-action@v1
   #       with:
   #         config: >-
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 552cd3b..13b656c 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -21,7 +21,7 @@ jobs:
     name: Markdown lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - uses: actions/setup-node@v4
         with:
@@ -38,7 +38,7 @@ jobs:
     name: Link check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - uses: lycheeverse/lychee-action@v2
         with: