diff --git a/.github/workflows/content-aware-hash.yml b/.github/workflows/content-aware-hash.yml
index 84d27b4ccc6d7..2ee12b1791227 100644
--- a/.github/workflows/content-aware-hash.yml
+++ b/.github/workflows/content-aware-hash.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Fetch base commit and origin/master
         run: |
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index df767a28a80d9..4a7590d2fa0a7 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.repository == 'flutter/flutter' }}
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
       - name: ./bin/flutter test --coverage
         run: pushd packages/flutter;../../bin/flutter test --coverage -j 1;popd
       - name: upload coverage
diff --git a/.github/workflows/easy-cp.yml b/.github/workflows/easy-cp.yml
index 98e5e763aa9e1..354d0db3a6c7b 100644
--- a/.github/workflows/easy-cp.yml
+++ b/.github/workflows/easy-cp.yml
@@ -30,7 +30,7 @@ jobs:
         run: |
           echo "COMMIT_SHA=$(echo ${{ github.event.pull_request.merge_commit_sha }})" >> $GITHUB_ENV
       - name: Checkout Flutter Repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
         with:
           repository: flutteractionsbot/flutter
           path: flutter
diff --git a/.github/workflows/files-changed.yml b/.github/workflows/files-changed.yml
index 9fc15957e0c93..351077e1f13ad 100644
--- a/.github/workflows/files-changed.yml
+++ b/.github/workflows/files-changed.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Fetch base commit and origin/master
         # Fetch what to compare the commit against
diff --git a/.github/workflows/merge-changelog.yml b/.github/workflows/merge-changelog.yml
index 1f175beeb0c78..fc2b6b44cb8f6 100644
--- a/.github/workflows/merge-changelog.yml
+++ b/.github/workflows/merge-changelog.yml
@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: Setup Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           repository: ${{ github.repository }}
           ref: master
diff --git a/.github/workflows/tool-test-general.yml b/.github/workflows/tool-test-general.yml
index b88ce7f7b71e6..7a801a5d27293 100644
--- a/.github/workflows/tool-test-general.yml
+++ b/.github/workflows/tool-test-general.yml
@@ -22,7 +22,7 @@ jobs:
 
     steps:
       # Note: we must check out the tree for the composite action to be available
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: ./.github/actions/composite-flutter-setup
 
       - name: Tool Test