diff --git a/.github/workflows/alloy-check.yaml b/.github/workflows/alloy-check.yaml
index d702cd7..dc2ccc8 100644
--- a/.github/workflows/alloy-check.yaml
+++ b/.github/workflows/alloy-check.yaml
@@ -16,7 +16,7 @@ jobs:
     runs-on: "ubuntu-latest"
     steps:
       - name: "Checkout"
-        uses: "actions/checkout@v4.2.2"
+        uses: "actions/checkout@v6.0.3"
 
       # Pin the toolchain to the exact Alloy version baked into the Docker image
       # so CI checks the config against the same binary that runs in production.