diff --git a/.github/workflows/black.yml b/.github/workflows/black.yml
index a1d43144..62258a07 100644
--- a/.github/workflows/black.yml
+++ b/.github/workflows/black.yml
@@ -8,8 +8,8 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout the repo
-        uses: actions/checkout@v3
-      - uses: actions/setup-python@v4
+        uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
         with:
            python-version: '3.x'
       - run: pip install black
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index bf2ee199..7054664d 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -20,7 +20,7 @@ jobs:
         compiler: [ gcc, clang ]
     steps:
       - name: Checkout the repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - uses: linuxwacom/libwacom/.github/actions/pkginstall@master
         with:
           apt: $UBUNTU_PACKAGES
@@ -73,7 +73,7 @@ jobs:
           # https://github.com/mesonbuild/meson/issues/764
           - '-Db_sanitize=address,undefined -Db_lundef=false'
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: linuxwacom/libwacom/.github/actions/pkginstall@master
         with:
           apt: $UBUNTU_PACKAGES
@@ -96,7 +96,7 @@ jobs:
   compile-with-meson-exact-version:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: linuxwacom/libwacom/.github/actions/pkginstall@master
         with:
           apt: $UBUNTU_PACKAGES
@@ -191,7 +191,7 @@ jobs:
       TARBALLDIR: '_tarball_dir'
     steps:
       - name: Checkout the repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: fetch tarball from previous job(s)
         uses: actions/download-artifact@v4
         with:
diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml
index fcd08611..74b1c772 100644
--- a/.github/workflows/coverity.yml
+++ b/.github/workflows/coverity.yml
@@ -22,7 +22,7 @@ jobs:
     if: ${{ github.repository == '$COVERITY_SCAN_PROJECT_NAME' }}
     steps:
       - name: Checkout the repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Set up build environment / dependencies
         run: |