diff --git a/.github/workflows/ci-java.yml b/.github/workflows/ci-java.yml
index f1dbbf0..74d3dcd 100644
--- a/.github/workflows/ci-java.yml
+++ b/.github/workflows/ci-java.yml
@@ -10,7 +10,7 @@ jobs:
   maven:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: actions/setup-java@v4
         with:
           distribution: temurin
diff --git a/.github/workflows/ci-native.yml b/.github/workflows/ci-native.yml
index 6e88fcd..3a4ce2e 100644
--- a/.github/workflows/ci-native.yml
+++ b/.github/workflows/ci-native.yml
@@ -14,7 +14,7 @@ jobs:
       matrix:
         os: [ubuntu-latest, macos-latest, windows-latest]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Set up JDK (JNI)
         uses: actions/setup-java@v4
         with:
diff --git a/.github/workflows/ci-platform.yml b/.github/workflows/ci-platform.yml
index aafd154..c723ef8 100644
--- a/.github/workflows/ci-platform.yml
+++ b/.github/workflows/ci-platform.yml
@@ -20,7 +20,7 @@ jobs:
   maven-services:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: actions/setup-java@v4
         with:
           distribution: temurin
@@ -41,7 +41,7 @@ jobs:
   web-ui-build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: actions/setup-node@v4
         with:
           node-version: "20"
diff --git a/.github/workflows/ci-security.yml b/.github/workflows/ci-security.yml
index f9db620..8e71fc5 100644
--- a/.github/workflows/ci-security.yml
+++ b/.github/workflows/ci-security.yml
@@ -20,7 +20,7 @@ jobs:
           - scan-ref: services
           - scan-ref: java
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Run Trivy filesystem scan
         uses: aquasecurity/trivy-action@0.28.0
         with:
@@ -41,7 +41,7 @@ jobs:
       run:
         working-directory: web/delivery-platform-ui
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: actions/setup-node@v4
         with:
           node-version: "20"
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e241dd9..7a8c9ee 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,7 +9,7 @@ jobs:
   placeholder:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Tag pushed
         run: |
           echo "Release workflow placeholder — attach native ZIP & Maven publish in later milestone."
diff --git a/.github/workflows/sdk-release-checksums.yml b/.github/workflows/sdk-release-checksums.yml
index d1e8a44..b0bfb85 100644
--- a/.github/workflows/sdk-release-checksums.yml
+++ b/.github/workflows/sdk-release-checksums.yml
@@ -8,7 +8,7 @@ jobs:
   checksums:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: actions/setup-java@v4
         with:
           distribution: temurin