diff --git a/.github/workflows/check_changelog.yml b/.github/workflows/check_changelog.yml
index c590644..31f8745 100644
--- a/.github/workflows/check_changelog.yml
+++ b/.github/workflows/check_changelog.yml
@@ -15,7 +15,7 @@ jobs:
       !contains(github.event.pull_request.labels.*.name, 'dependencies')
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Check that CHANGELOG is touched
         run: |
           git fetch origin ${{ github.base_ref }} --depth 1 && \
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 859cbc8..f974af5 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -32,7 +32,7 @@ jobs:
       # Default stack for all Heroku apps created by Hatchet
       DEFAULT_APP_STACK: ${{ matrix.stack }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Install Ruby and dependencies
         uses: ruby/setup-ruby@v1
         with:
@@ -51,7 +51,7 @@ jobs:
       # source. I ported this as-is from the Travis config. Given we're trying to get rid of testrunner entirely,
       # it will stay like this. If we, for some reason, decide to keep testrunner, we should look into a fixed STACK env var.
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: actions/setup-java@v3
         with:
           distribution: zulu
diff --git a/.github/workflows/hatchet_app_cleaner.yml b/.github/workflows/hatchet_app_cleaner.yml
index 45d95ad..4bc057b 100644
--- a/.github/workflows/hatchet_app_cleaner.yml
+++ b/.github/workflows/hatchet_app_cleaner.yml
@@ -19,7 +19,7 @@ jobs:
       HEROKU_DISABLE_AUTOUPDATE: 1
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Install Ruby and dependencies
         uses: ruby/setup-ruby@v1
         with: