diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 7e3e12f7..f2238928 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -10,7 +10,7 @@ jobs:
 
     steps:
     - name: Set up environment
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:  # no need for the history
         fetch-depth: 1
     - name: Set up Python
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 87bad907..6e9aaba8 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,7 +18,7 @@ jobs:
       auto-version: ${{ steps.auto-version.outputs.version }}
     steps:
       - name: Checkout source
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           # A full checkout is required so that auto will have access to tag
           # information.
@@ -44,7 +44,7 @@ jobs:
     if: needs.release-check.outputs.auto-version != ''
     steps:
       - name: Checkout source
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
           path: dandischema
@@ -74,7 +74,7 @@ jobs:
           echo "SCHEMA_VERSION=$SCHEMA_VERSION" >> "$GITHUB_ENV"
 
       - name: Checkout dandi/schema
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: dandi/schema
           path: schema
diff --git a/.github/workflows/test-dandi-cli.yml b/.github/workflows/test-dandi-cli.yml
index c751df84..41d15ea9 100644
--- a/.github/workflows/test-dandi-cli.yml
+++ b/.github/workflows/test-dandi-cli.yml
@@ -80,7 +80,7 @@ jobs:
         run: echo DANDI_DEVEL=1 >> "$GITHUB_ENV"
 
       - name: Check out dandischema
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           # Fetch all commits so that versioningit will return something
           # compatible with semantic-version
diff --git a/.github/workflows/test-nonetwork.yml b/.github/workflows/test-nonetwork.yml
index 48a7642d..6b72ac9f 100644
--- a/.github/workflows/test-nonetwork.yml
+++ b/.github/workflows/test-nonetwork.yml
@@ -26,7 +26,7 @@ jobs:
           - '3.11'
     steps:
       - name: Set up environment
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           # Fetch all commits so that versioningit will return something
           # compatible with semantic-version
diff --git a/.github/workflows/test-schema.yml b/.github/workflows/test-schema.yml
index d565af92..bd195f4c 100644
--- a/.github/workflows/test-schema.yml
+++ b/.github/workflows/test-schema.yml
@@ -11,7 +11,7 @@ jobs:
     if: contains(github.event.pull_request.labels.*.name, 'release')
     steps:
       - name: Checkout this repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0  # Need history for `git describe`
           path: dandischema
@@ -26,7 +26,7 @@ jobs:
         working-directory: dandischema
 
       - name: Checkout dandi/schema
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: dandi/schema
           path: schema
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 4f065e4c..919a8351 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -27,7 +27,7 @@ jobs:
           - '3.11'
     steps:
     - name: Set up environment
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         # Fetch all commits so that versioningit will return something
         # compatible with semantic-version
diff --git a/.github/workflows/typing.yml b/.github/workflows/typing.yml
index 71655c6c..bc6b7d76 100644
--- a/.github/workflows/typing.yml
+++ b/.github/workflows/typing.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0