diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index bc34641958263..9e3777e34106a 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -11,8 +11,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out
-        uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+        uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
         with:
           node-version: "18"
       - name: Verify duplicated file names
@@ -32,8 +32,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out
-        uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+        uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
         with:
           node-version: "18"
       - name: Check TOC-tidb-cloud.md existence
@@ -57,7 +57,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
       - name: Vale Linter
         uses: errata-ai/vale-action@reviewdog
         with:
diff --git a/.github/workflows/media.yml b/.github/workflows/media.yml
index 378650241a136..fbe6cb6f20136 100644
--- a/.github/workflows/media.yml
+++ b/.github/workflows/media.yml
@@ -11,7 +11,7 @@ jobs:
     name: Upload media files
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
         with:
           # Must use at least depth 2!
           fetch-depth: 2
@@ -60,10 +60,10 @@ jobs:
       TENCENTCLOUD_SECRET_KEY: ${{ secrets.TENCENTCLOUD_SECRET_KEY }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Python environment
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: "3.12"
           architecture: "x64"
diff --git a/.github/workflows/prevent-deletion.yaml b/.github/workflows/prevent-deletion.yaml
index e1961dfc500a6..9d08804908a40 100644
--- a/.github/workflows/prevent-deletion.yaml
+++ b/.github/workflows/prevent-deletion.yaml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout base
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - name: Fetch head
diff --git a/.github/workflows/rebase.yml b/.github/workflows/rebase.yml
index 73cce3c0fa894..3db5ea50b7172 100644
--- a/.github/workflows/rebase.yml
+++ b/.github/workflows/rebase.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout the latest code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
         with:
           token: ${{ secrets.REBASE_SECRET_KEY }}
           fetch-depth: 0 # otherwise, you will fail to push refs to dest repo