diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index a1ca1ec..8096175 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -27,7 +27,7 @@ jobs:
       image: ghcr.io/go-debos/test-containers/trixie:main
     steps:
     - name: Checkout code
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       with:
         fetch-depth: 0
         filter: tree:0
@@ -62,7 +62,7 @@ jobs:
       image: ghcr.io/go-debos/test-containers/${{matrix.variant}}:main
     steps:
     - name: Checkout code
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       with:
         fetch-depth: 0
         filter: tree:0
@@ -93,7 +93,7 @@ jobs:
       - test
     steps:
       - name: Repository checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3
@@ -153,7 +153,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Repository checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Setup Docker buildx
         uses: docker/setup-buildx-action@v3
@@ -234,7 +234,7 @@ jobs:
     runs-on: 'ubuntu-latest'
     steps:
       - name: Repository checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Install QEMU emulation binaries
         if: ${{ matrix.backend == 'nofakemachine' }}
@@ -279,7 +279,7 @@ jobs:
     name: Build example Debos recipe ${{matrix.example}}
     steps:
       - name: Repository checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Download artifact
         uses: actions/download-artifact@v6
@@ -334,7 +334,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Extract Docker metadata
         id: meta
@@ -414,7 +414,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Extract Docker metadata
         id: meta