diff --git a/.github/workflows/_test-docker.yaml b/.github/workflows/_test-docker.yaml
index e5fe582..bb5cd2d 100644
--- a/.github/workflows/_test-docker.yaml
+++ b/.github/workflows/_test-docker.yaml
@@ -86,7 +86,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Upload Artifact
         uses: actions/upload-artifact@v6
diff --git a/.github/workflows/_test-gitops.yaml b/.github/workflows/_test-gitops.yaml
index d38cfb4..217f9c8 100644
--- a/.github/workflows/_test-gitops.yaml
+++ b/.github/workflows/_test-gitops.yaml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5.0.0
+        uses: actions/checkout@v6.0.2
 
       - name: Edit Helm values
         run: |
diff --git a/.github/workflows/_test-lambda-nodejs.yaml b/.github/workflows/_test-lambda-nodejs.yaml
index 1fda927..45d1ab3 100644
--- a/.github/workflows/_test-lambda-nodejs.yaml
+++ b/.github/workflows/_test-lambda-nodejs.yaml
@@ -18,7 +18,7 @@ jobs:
         working-directory: tests/lambda/nodejs
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Install dependencies
         run: npm install
diff --git a/.github/workflows/_test-lambda-python.yaml b/.github/workflows/_test-lambda-python.yaml
index 6ae68a4..7240692 100644
--- a/.github/workflows/_test-lambda-python.yaml
+++ b/.github/workflows/_test-lambda-python.yaml
@@ -18,7 +18,7 @@ jobs:
         working-directory: tests/lambda/python
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
   build:
     uses: ./.github/workflows/lambda-python.yaml
diff --git a/.github/workflows/_test-tf.yaml b/.github/workflows/_test-tf.yaml
index bd402dc..63e287a 100644
--- a/.github/workflows/_test-tf.yaml
+++ b/.github/workflows/_test-tf.yaml
@@ -125,7 +125,7 @@ jobs:
   test_upload_artifact:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/upload-artifact@v6
         with:
           name: docker-artifacts
diff --git a/.github/workflows/aws-rds-version-management.yaml b/.github/workflows/aws-rds-version-management.yaml
index 8925130..8cf877e 100644
--- a/.github/workflows/aws-rds-version-management.yaml
+++ b/.github/workflows/aws-rds-version-management.yaml
@@ -56,7 +56,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Configure AWS credentials
         uses: aws-actions/configure-aws-credentials@00943011d9042930efac3dcd3a170e4273319bc8 # v5
diff --git a/.github/workflows/docker-build-push-ecr.yaml b/.github/workflows/docker-build-push-ecr.yaml
index f49a4b5..03f7c66 100644
--- a/.github/workflows/docker-build-push-ecr.yaml
+++ b/.github/workflows/docker-build-push-ecr.yaml
@@ -70,7 +70,7 @@ jobs:
       contents: read
     steps:
       - name: Check out code
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Download Artifacts
         env:
diff --git a/.github/workflows/docker-build.yaml b/.github/workflows/docker-build.yaml
index 3536525..e4f39e8 100644
--- a/.github/workflows/docker-build.yaml
+++ b/.github/workflows/docker-build.yaml
@@ -42,7 +42,7 @@ jobs:
       DOCKERFILE_PATH: ${{ inputs.dockerfile_path || vars.dockerfile_path }} # upstream defaults to {DOCKER_CTX}/Dockerfile
     steps:
       - name: Check out code
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
diff --git a/.github/workflows/docker-buildx-push-ecr.yaml b/.github/workflows/docker-buildx-push-ecr.yaml
index 9ea48f7..f7f5615 100644
--- a/.github/workflows/docker-buildx-push-ecr.yaml
+++ b/.github/workflows/docker-buildx-push-ecr.yaml
@@ -107,7 +107,7 @@ jobs:
 
     steps:
       - name: Checkout source
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Download Artifacts
         env:
diff --git a/.github/workflows/gh-release-on-main.yaml b/.github/workflows/gh-release-on-main.yaml
index 16acca1..34442b5 100644
--- a/.github/workflows/gh-release-on-main.yaml
+++ b/.github/workflows/gh-release-on-main.yaml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Retrieve Merge Commit Message
         id: merge_commit_message
diff --git a/.github/workflows/gh-release.yaml b/.github/workflows/gh-release.yaml
index 1356bf8..240b40b 100644
--- a/.github/workflows/gh-release.yaml
+++ b/.github/workflows/gh-release.yaml
@@ -91,7 +91,7 @@ jobs:
           private-key: ${{ secrets.app_private_key }}
 
       - name: Checkout
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           fetch-depth: 0
           persist-credentials: true
diff --git a/.github/workflows/gitops-helm-diff.yaml b/.github/workflows/gitops-helm-diff.yaml
index e706a2d..a8c4e49 100644
--- a/.github/workflows/gitops-helm-diff.yaml
+++ b/.github/workflows/gitops-helm-diff.yaml
@@ -54,7 +54,7 @@ jobs:
       env_values_files: ${{ steps.filter-envs.outputs.env_values_files }}
       env_list: ${{ steps.filter-envs.outputs.env_list }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
@@ -104,7 +104,7 @@ jobs:
           echo "Environments to check: ${{ steps.filter-envs.outputs.env_list }}"
 
       - name: Checkout target branch
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         if: steps.changed-files.outputs.chart_values_any_changed == 'true' || steps.changed-files.outputs.env_values_any_changed == 'true'
         with:
           ref: ${{ inputs.base_branch }}
diff --git a/.github/workflows/gitops-image-tag.yaml b/.github/workflows/gitops-image-tag.yaml
index 4fd2a70..473f113 100644
--- a/.github/workflows/gitops-image-tag.yaml
+++ b/.github/workflows/gitops-image-tag.yaml
@@ -54,7 +54,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5.0.0
+        uses: actions/checkout@v6.0.2
 
       - name: Update Helm values files
         run: |
diff --git a/.github/workflows/gitops-kustomize-diff.yaml b/.github/workflows/gitops-kustomize-diff.yaml
index 78e8272..0631a67 100644
--- a/.github/workflows/gitops-kustomize-diff.yaml
+++ b/.github/workflows/gitops-kustomize-diff.yaml
@@ -45,7 +45,7 @@ jobs:
       env_overlays_files: ${{ steps.filter-envs.outputs.env_overlays_files }}
       env_list: ${{ steps.filter-envs.outputs.env_list }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
@@ -94,7 +94,7 @@ jobs:
           echo "Changed environment files: ${{ steps.changed-files.outputs.env_overlays_all_changed_files }}"
           echo "Environments to check: ${{ steps.filter-envs.outputs.env_list }}"
 
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         if: steps.changed-files.outputs.base_kustomize_any_changed == 'true' || steps.changed-files.outputs.env_overlays_any_changed == 'true'
         with:
           ref: ${{ inputs.base_branch }}
diff --git a/.github/workflows/labeler.yaml b/.github/workflows/labeler.yaml
index c361c3d..142879f 100644
--- a/.github/workflows/labeler.yaml
+++ b/.github/workflows/labeler.yaml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Run Labeler
         uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1
diff --git a/.github/workflows/lambda-build-node.yaml b/.github/workflows/lambda-build-node.yaml
index 377fde2..61a318d 100644
--- a/.github/workflows/lambda-build-node.yaml
+++ b/.github/workflows/lambda-build-node.yaml
@@ -32,7 +32,7 @@ jobs:
         working-directory: ${{ inputs.source_dir || vars.source_dir || 'src'}}
     steps:
       - name: Checkout
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Build
         id: build
diff --git a/.github/workflows/lambda-nodejs.yaml b/.github/workflows/lambda-nodejs.yaml
index e59f425..ac286ed 100644
--- a/.github/workflows/lambda-nodejs.yaml
+++ b/.github/workflows/lambda-nodejs.yaml
@@ -33,7 +33,7 @@ jobs:
         working-directory: ${{ env.SOURCE_DIR }}
     steps:
       - name: Checkout
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Set up Node.js
         uses: actions/setup-node@v5
diff --git a/.github/workflows/lambda-python.yaml b/.github/workflows/lambda-python.yaml
index 8e97b84..97af329 100644
--- a/.github/workflows/lambda-python.yaml
+++ b/.github/workflows/lambda-python.yaml
@@ -43,7 +43,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Set up Python
         uses: actions/setup-python@v6
diff --git a/.github/workflows/tf-apply.yaml b/.github/workflows/tf-apply.yaml
index 7f3b90c..23cfcc1 100644
--- a/.github/workflows/tf-apply.yaml
+++ b/.github/workflows/tf-apply.yaml
@@ -77,7 +77,7 @@ jobs:
       TF_VARS: ${{ inputs.tf_vars || vars.tf_vars }}
     steps:
       - name: Checkout
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           ref: ${{ inputs.gh_checkout_ref }}
 
diff --git a/.github/workflows/tf-cleanup.yaml b/.github/workflows/tf-cleanup.yaml
index 8b67b21..80dfc47 100644
--- a/.github/workflows/tf-cleanup.yaml
+++ b/.github/workflows/tf-cleanup.yaml
@@ -62,7 +62,7 @@ jobs:
       TF_VARS: ${{ inputs.tf_vars || vars.tf_vars }}
     steps:
       - name: Checkout
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           ref: ${{ inputs.gh_checkout_ref }}
 
diff --git a/.github/workflows/tf-destroy.yaml b/.github/workflows/tf-destroy.yaml
index 86c1aab..b029248 100644
--- a/.github/workflows/tf-destroy.yaml
+++ b/.github/workflows/tf-destroy.yaml
@@ -56,7 +56,7 @@ jobs:
       TF_VARS: ${{ inputs.tf_vars || vars.tf_vars }}
     steps:
       - name: Checkout
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           ref: ${{ inputs.gh_checkout_ref }}
 
diff --git a/.github/workflows/tf-feature.yaml b/.github/workflows/tf-feature.yaml
index cb1f578..0e92b21 100644
--- a/.github/workflows/tf-feature.yaml
+++ b/.github/workflows/tf-feature.yaml
@@ -83,7 +83,7 @@ jobs:
           echo "TF_WORKSPACE=$SANITISED_WORKSPACE" >> $GITHUB_ENV
 
       - name: Checkout
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           ref: ${{ inputs.gh_checkout_ref }}
 
diff --git a/.github/workflows/tf-plan.yaml b/.github/workflows/tf-plan.yaml
index 5fa50f2..5939d25 100644
--- a/.github/workflows/tf-plan.yaml
+++ b/.github/workflows/tf-plan.yaml
@@ -77,7 +77,7 @@ jobs:
       TF_VARS: ${{ inputs.tf_vars || vars.tf_vars }}
     steps:
       - name: Checkout
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           ref: ${{ inputs.gh_checkout_ref }}