diff --git a/container/container-rebuild.yml b/container/container-rebuild.yml
index 4b05033..59c9a7d 100644
--- a/container/container-rebuild.yml
+++ b/container/container-rebuild.yml
@@ -28,7 +28,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           ref: {% raw %}${{ github.event.inputs.git-tag }}{% endraw %}
 {%- if container_needs_git_tags %}
diff --git a/container/container.yml b/container/container.yml
index 6f194ad..1b04a9a 100644
--- a/container/container.yml
+++ b/container/container.yml
@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 {%- if container_needs_git_tags %}
         with:
           # fetch tags so the compiled-in version number is useful
diff --git a/go/tests-ignition.yml b/go/tests-ignition.yml
index 0b4c065..e6dc0a6 100644
--- a/go/tests-ignition.yml
+++ b/go/tests-ignition.yml
@@ -29,7 +29,7 @@ jobs:
       with:
         go-version: {% raw %}${{ matrix.go-version }}{% endraw %}
     - name: Check out repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
     - name: Build ignition-validate
       shell: bash
       run: go build -o ignition-validate github.com/coreos/ignition/v2/validate
diff --git a/go/tests.yml b/go/tests.yml
index caf2fb1..36c3383 100644
--- a/go/tests.yml
+++ b/go/tests.yml
@@ -38,7 +38,7 @@ jobs:
       with:
         go-version: {% raw %}${{ matrix.go-version }}{% endraw %}
     - name: Check out repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
 {%- if go_dependencies %}
     - name: Install Go dependencies
       run: go get {{ go_dependencies | join(sep=" ") }}
@@ -89,7 +89,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Check out repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
     - name: Set up Go 1.x
       uses: actions/setup-go@v4
       with:
diff --git a/rust/rpm-test.yml b/rust/rpm-test.yml
index b8211b4..b2421d5 100644
--- a/rust/rpm-test.yml
+++ b/rust/rpm-test.yml
@@ -27,7 +27,7 @@ jobs:
       - name: Install packages
         run: dnf install -y git make mock
       - name: Check out repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         # fetch tags for versioning
         with:
           fetch-depth: 0
@@ -41,7 +41,7 @@ jobs:
           mock --rebuild --enablerepo=updates-testing rpms/*.src.rpm
           find /var/lib/mock -wholename '*/result/*.rpm' | xargs mv -t rpms
       - name: Archive RPMs
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: rpms
           path: rpms/
diff --git a/rust/tests.yml b/rust/tests.yml
index a965212..61d582f 100644
--- a/rust/tests.yml
+++ b/rust/tests.yml
@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Install toolchain
         uses: dtolnay/rust-toolchain@v1
         with:
@@ -50,7 +50,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Install toolchain
         uses: dtolnay/rust-toolchain@v1
         with:
@@ -66,7 +66,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 {%- if msrv == "auto" %}
       - name: Detect crate MSRV
         run: |
@@ -90,7 +90,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Install toolchain
         uses: dtolnay/rust-toolchain@v1
         with:
@@ -111,7 +111,7 @@ jobs:
         channel: [beta, nightly]
     steps:
       - name: Check out repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Install toolchain
         uses: dtolnay/rust-toolchain@v1
         with:
diff --git a/shellcheck/workflow.yml b/shellcheck/workflow.yml
index a9ba111..69adecc 100644
--- a/shellcheck/workflow.yml
+++ b/shellcheck/workflow.yml
@@ -16,7 +16,7 @@ jobs:
     container: quay.io/coreos-assembler/fcos-buildroot:testing-devel
     steps:
       - name: Check out repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       # https://github.com/actions/checkout/issues/760
       - name: Mark git checkout as safe
         run: git config --global --add safe.directory "$GITHUB_WORKSPACE"