diff --git a/.github/workflows/linter.yaml b/.github/workflows/linter.yaml
index 77a07b0..6cc6ae9 100644
--- a/.github/workflows/linter.yaml
+++ b/.github/workflows/linter.yaml
@@ -19,7 +19,7 @@ jobs:
     if: ${{ github.actor != 'dependabot[bot]' && github.event.pull_request.draft == false }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           # fetch-depth: 0 # can be removed if VALIDATE_ALL_CODEBASE = true
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 7177519..86c50ec 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -16,7 +16,7 @@ jobs:
     if: github.actor != 'dependabot[bot]'
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Docker meta
         id: meta
diff --git a/.github/workflows/verify-pullrequest.yaml b/.github/workflows/verify-pullrequest.yaml
index c7fff48..c7d36c2 100644
--- a/.github/workflows/verify-pullrequest.yaml
+++ b/.github/workflows/verify-pullrequest.yaml
@@ -25,7 +25,7 @@ jobs:
       image_tag: "tungbeier/gcloud-pubsub-emulator:test"
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Build image
         uses: docker/build-push-action@v4