diff --git a/.github/workflows/ci-gh-validate-legate-sha.yml b/.github/workflows/ci-gh-validate-legate-sha.yml
index 801ba0bfcd..7f18f23029 100644
--- a/.github/workflows/ci-gh-validate-legate-sha.yml
+++ b/.github/workflows/ci-gh-validate-legate-sha.yml
@@ -24,7 +24,7 @@ jobs:
     timeout-minutes: 15
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v6
         with:
           path: cupynumeric.internal
 
@@ -52,7 +52,7 @@ jobs:
           fi
 
       - name: Clone dependency
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v6
         with:
           repository: "${{ env.GIT_ORG }}/${{ env.GIT_REPO }}"
           ref: ${{ env.GIT_REF }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3bde4668bb..de301f5810 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -28,7 +28,7 @@ jobs:
       LEGATE_SHA: ${{ steps.legate-sha.outputs.sha }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - name: Get the Legate SHA
diff --git a/.github/workflows/gh-build-docs.yml b/.github/workflows/gh-build-docs.yml
index 82b3be7d10..a45aba86d3 100644
--- a/.github/workflows/gh-build-docs.yml
+++ b/.github/workflows/gh-build-docs.yml
@@ -121,7 +121,7 @@ jobs:
           echo "docs_dir=${PARENT_DIR}" >> "${GITHUB_OUTPUT}"
 
       - name: Checkout
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/gh-test-with-slurm.yml b/.github/workflows/gh-test-with-slurm.yml
index ecb43b0d5b..a41e58c675 100644
--- a/.github/workflows/gh-test-with-slurm.yml
+++ b/.github/workflows/gh-test-with-slurm.yml
@@ -55,7 +55,7 @@ jobs:
       LEGATE_CUDA_VERSION: ${{ inputs.cuda-version }}
     steps:
       - name: Checkout legate-gh-ci
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           repository: "nv-legate/legate-gh-ci"
           ref: ${{ inputs.legate-gh-ci-tag }}
@@ -96,7 +96,7 @@ jobs:
           | tee -a "${GITHUB_OUTPUT}"
 
       - name: Download build artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: ${{ env.ARTIFACT_NAME }}
           path: ${{ env.ARTIFACTS_DIR }}
@@ -200,7 +200,7 @@ jobs:
 
       - if: steps.output-artifacts-exist.outputs.output-artifacts-exist == 'true'
         name: Upload output artifacts
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v7
         with:
           name: ${{ env.OUTPUT_ARTIFACT_NAME }}
           path: ${{ env.OUTPUT_ARTIFACTS_DIR }}
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 7e267129f5..6b2dfd4d23 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -30,7 +30,7 @@ jobs:
 
     steps:
       - name: Checkout ${{ github.event.repository.name }} (= this repo)
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/wheels-mac.yml b/.github/workflows/wheels-mac.yml
index c2ad1e34da..056668f990 100644
--- a/.github/workflows/wheels-mac.yml
+++ b/.github/workflows/wheels-mac.yml
@@ -87,7 +87,7 @@ jobs:
         env:
           GH_TOKEN: ${{ github.token }}
 
-      - uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98  # v5
+      - uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231  # v5
         with:
           repository: ${{ inputs.repo }}
           ref: ${{ inputs.sha }}