diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2087a0bd..f0a53ecd 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -29,7 +29,7 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
       - run: make release
       - name: upload artifacts
@@ -41,7 +41,7 @@ jobs:
   validate:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
         with:
           # We currently need to pick a set Go version because sometimes Go
@@ -67,7 +67,7 @@ jobs:
     env:
       COVERAGE: umoci.coverage
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
         with:
           go-version: '^1'
@@ -91,7 +91,7 @@ jobs:
   linux-ci-image:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: get current date
         id: date
         run: |
@@ -123,7 +123,7 @@ jobs:
     env:
       COVERAGE: umoci.coverage
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: download ci image
         uses: actions/download-artifact@v3
         with:
@@ -157,7 +157,7 @@ jobs:
       TEST_DOCKER_IMAGE: ${{ matrix.image }}
       COVERAGE: umoci.coverage
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: download ci image
         uses: actions/download-artifact@v3
         with:
@@ -184,7 +184,7 @@ jobs:
     env:
       COVERAGE: umoci.coverage
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: download all coverage
         uses: actions/download-artifact@v3
         with: