diff --git a/.github/workflows/app-build-verify.yml b/.github/workflows/app-build-verify.yml
index 25e4ef5b..82ea71be 100644
--- a/.github/workflows/app-build-verify.yml
+++ b/.github/workflows/app-build-verify.yml
@@ -55,13 +55,13 @@ jobs:
     steps:
 
     - name: Checkout ${{ inputs.repository }}
-      uses: actions/checkout@v3.3.0
+      uses: actions/checkout@v4
       with:
         repository: ${{ inputs.repository }}
         fetch-depth: 0
 
     - name: Checkout beeware/.github
-      uses: actions/checkout@v3.3.0
+      uses: actions/checkout@v4
       with:
         repository: "beeware/.github"
         path: "beeware-.github"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b54c1648..4f9f5626 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -113,7 +113,7 @@ jobs:
           expected: "main"
     steps:
     - name: Checkout .github repo
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
 
     - name: Set up Python
       uses: actions/setup-python@v4.7.0
@@ -148,7 +148,7 @@ jobs:
       matrix:
         python-version: [ "3.8", "3.9", "3.10", "3.11" ]
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
 
     - name: Install Windows Store Python
       uses: ./.github/actions/install-win-store-python
diff --git a/.github/workflows/dependabot-changenote.yml b/.github/workflows/dependabot-changenote.yml
index 14fd3bac..ac1ccd19 100644
--- a/.github/workflows/dependabot-changenote.yml
+++ b/.github/workflows/dependabot-changenote.yml
@@ -15,7 +15,7 @@ jobs:
     steps:
 
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 1
           token: ${{ secrets.BRUTUS_PAT_TOKEN }}
diff --git a/.github/workflows/pre-commit-run.yml b/.github/workflows/pre-commit-run.yml
index a2553586..71964cce 100644
--- a/.github/workflows/pre-commit-run.yml
+++ b/.github/workflows/pre-commit-run.yml
@@ -36,7 +36,7 @@ jobs:
     steps:
 
     - name: Checkout
-      uses: actions/checkout@v3.3.0
+      uses: actions/checkout@v4
       with:
         repository: ${{ inputs.repository }}
 
diff --git a/.github/workflows/pre-commit-update.yml b/.github/workflows/pre-commit-update.yml
index 6b906ad5..d52e8678 100644
--- a/.github/workflows/pre-commit-update.yml
+++ b/.github/workflows/pre-commit-update.yml
@@ -40,7 +40,7 @@ jobs:
       hook-repos: ${{ steps.hooks.outputs.repos }}
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v3.5.2
+        uses: actions/checkout@v4
 
       - name: Get Pre-commit Hooks
         id: hooks
@@ -59,7 +59,7 @@ jobs:
         hook-repo: ${{ fromJson(needs.pre-commit-hooks.outputs.hook-repos) }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 1
           token: ${{ secrets.BRUTUS_PAT_TOKEN }}
diff --git a/.github/workflows/python-package-create.yml b/.github/workflows/python-package-create.yml
index abeb014c..920a3a47 100644
--- a/.github/workflows/python-package-create.yml
+++ b/.github/workflows/python-package-create.yml
@@ -52,7 +52,7 @@ jobs:
         run: echo "name=$(basename '${{ inputs.repository }}')" >> ${GITHUB_OUTPUT}
 
       - name: Checkout
-        uses: actions/checkout@v3.3.0
+        uses: actions/checkout@v4
         with:
           repository: ${{ inputs.repository }}
           fetch-depth: 0  # Fetch all refs so setuptools_scm can generate the correct version number
diff --git a/.github/workflows/towncrier-run.yml b/.github/workflows/towncrier-run.yml
index fd74acba..e871e7f6 100644
--- a/.github/workflows/towncrier-run.yml
+++ b/.github/workflows/towncrier-run.yml
@@ -39,14 +39,14 @@ jobs:
     steps:
 
     - name: Checkout Default Branch
-      uses: actions/checkout@v3.3.0
+      uses: actions/checkout@v4
       with:
         repository: ${{ inputs.repository }}
         ref: ${{ github.event.repository.default_branch }}
         fetch-depth: 0
 
     - name: Checkout Current Branch
-      uses: actions/checkout@v3.3.0
+      uses: actions/checkout@v4
       with:
         repository: ${{ inputs.repository }}
         fetch-depth: 0