diff --git a/.github/workflows/oa_update.yml b/.github/workflows/oa_update.yml
index 246f2e2..466df34 100644
--- a/.github/workflows/oa_update.yml
+++ b/.github/workflows/oa_update.yml
@@ -21,7 +21,7 @@ jobs:
       fail-fast: true
 
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8  # v5.0.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3  # v6.0.0
         with:
           fetch-depth: 0
 
@@ -63,7 +63,7 @@ jobs:
 
       - name: Create pull request
         if: steps.check.outputs.has_changes == '1'
-        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e  # v7.0.8
+        uses: peter-evans/create-pull-request@84ae59a2cdc2258d6fa0732dd66352dddae2a412  # v7.0.9
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           draft: ${{ steps.merge.outputs.has_conflicts == '1' }}
diff --git a/.github/workflows/pre-commit-update.yaml b/.github/workflows/pre-commit-update.yaml
index b2155c9..a0b7308 100644
--- a/.github/workflows/pre-commit-update.yaml
+++ b/.github/workflows/pre-commit-update.yaml
@@ -21,7 +21,7 @@ jobs:
       fail-fast: true
 
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8  # v5.0.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3  # v6.0.0
         with:
           fetch-depth: 0
 
@@ -35,7 +35,7 @@ jobs:
         run: pre-commit autoupdate -c '{{ cookiecutter.package_name }}/.pre-commit-config.yaml'
 
       - name: Create pull request
-        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e  # v7.0.8
+        uses: peter-evans/create-pull-request@84ae59a2cdc2258d6fa0732dd66352dddae2a412  # v7.0.9
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           delete-branch: true
diff --git a/{{ cookiecutter.package_name }}/.github/workflows/ci.yml b/{{ cookiecutter.package_name }}/.github/workflows/ci.yml
index 1bbb842..7f4fe14 100644
--- a/{{ cookiecutter.package_name }}/.github/workflows/ci.yml	
+++ b/{{ cookiecutter.package_name }}/.github/workflows/ci.yml	
@@ -42,7 +42,7 @@ jobs:
   sdist_verify:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-python@v6
         with:
           python-version: '{{ default_python }}'
diff --git a/{{ cookiecutter.package_name }}/.github/workflows/sub_package_update.yml b/{{ cookiecutter.package_name }}/.github/workflows/sub_package_update.yml
index 71bf5b9..60649ec 100644
--- a/{{ cookiecutter.package_name }}/.github/workflows/sub_package_update.yml	
+++ b/{{ cookiecutter.package_name }}/.github/workflows/sub_package_update.yml	
@@ -22,7 +22,7 @@ jobs:
     strategy:
       fail-fast: true
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - uses: actions/setup-python@v6
         with: