diff --git a/.github/workflows/frontend-pr.yml b/.github/workflows/frontend-pr.yml
index 89c03b2..10c75a2 100644
--- a/.github/workflows/frontend-pr.yml
+++ b/.github/workflows/frontend-pr.yml
@@ -13,7 +13,7 @@ jobs:
     needs: configured
     if: needs.configured.outputs.exists == 'true'
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
       - uses: valitydev/action-frontend/setup@v0.1
       - uses: valitydev/action-setup-thrift@v1.0.1
       - run: npm i  # protocols don't always update the package-lock.json, so installing from package.json
diff --git a/.github/workflows/frontend-publish.yml b/.github/workflows/frontend-publish.yml
index 9294ba7..b4802b1 100644
--- a/.github/workflows/frontend-publish.yml
+++ b/.github/workflows/frontend-publish.yml
@@ -13,7 +13,7 @@ jobs:
     needs: configured
     if: needs.configured.outputs.exists == 'true'
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
       - uses: valitydev/action-frontend/setup@v0.1
       - uses: valitydev/action-setup-thrift@v1.0.1
       - run: npm i # protocols don't always update the package-lock.json, so installing from package.json