diff --git a/.github/workflows/build-in-devcontainer.yaml b/.github/workflows/build-in-devcontainer.yaml
index 3ba797f5..6b977cc8 100644
--- a/.github/workflows/build-in-devcontainer.yaml
+++ b/.github/workflows/build-in-devcontainer.yaml
@@ -53,7 +53,7 @@ jobs:
         pkgr: ["conda", "pip"]
     runs-on: "linux-${{ matrix.arch }}-${{ inputs.node_type }}"
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
diff --git a/.github/workflows/checks.yaml b/.github/workflows/checks.yaml
index 93a915f4..ea8bad06 100644
--- a/.github/workflows/checks.yaml
+++ b/.github/workflows/checks.yaml
@@ -36,7 +36,7 @@ jobs:
         RAPIDS_GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
@@ -62,7 +62,7 @@ jobs:
       image: rapidsai/ci-conda:latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
diff --git a/.github/workflows/conda-cpp-build.yaml b/.github/workflows/conda-cpp-build.yaml
index 34f2002c..4e99814e 100644
--- a/.github/workflows/conda-cpp-build.yaml
+++ b/.github/workflows/conda-cpp-build.yaml
@@ -92,7 +92,7 @@ jobs:
           role-to-assume: ${{ vars.AWS_ROLE_ARN }}
           aws-region: ${{ vars.AWS_REGION }}
           role-duration-seconds: 43200 # 12h
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
diff --git a/.github/workflows/conda-cpp-post-build-checks.yaml b/.github/workflows/conda-cpp-post-build-checks.yaml
index 05e735c3..5579b146 100644
--- a/.github/workflows/conda-cpp-post-build-checks.yaml
+++ b/.github/workflows/conda-cpp-post-build-checks.yaml
@@ -52,7 +52,7 @@ jobs:
           role-to-assume: ${{ vars.AWS_ROLE_ARN }}
           aws-region: ${{ vars.AWS_REGION }}
           role-duration-seconds: 43200 # 12h
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
@@ -74,7 +74,7 @@ jobs:
           EXTRACTED_DIR=$(rapids-extract-conda-files "${CPP_DIR}")
           echo "RAPIDS_EXTRACTED_DIR=${EXTRACTED_DIR}" >> "${GITHUB_ENV}"
       - name: Get weak detection tool
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
diff --git a/.github/workflows/conda-cpp-tests.yaml b/.github/workflows/conda-cpp-tests.yaml
index 816ea075..9a521505 100644
--- a/.github/workflows/conda-cpp-tests.yaml
+++ b/.github/workflows/conda-cpp-tests.yaml
@@ -117,7 +117,7 @@ jobs:
           role-to-assume: ${{ vars.AWS_ROLE_ARN }}
           aws-region: ${{ vars.AWS_REGION }}
           role-duration-seconds: 43200 # 12h
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
diff --git a/.github/workflows/conda-python-build.yaml b/.github/workflows/conda-python-build.yaml
index 5fea0caa..336b1f2c 100644
--- a/.github/workflows/conda-python-build.yaml
+++ b/.github/workflows/conda-python-build.yaml
@@ -98,7 +98,7 @@ jobs:
           role-to-assume: ${{ vars.AWS_ROLE_ARN }}
           aws-region: ${{ vars.AWS_REGION }}
           role-duration-seconds: 43200 # 12h
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
diff --git a/.github/workflows/conda-python-tests.yaml b/.github/workflows/conda-python-tests.yaml
index c163892d..2808028a 100644
--- a/.github/workflows/conda-python-tests.yaml
+++ b/.github/workflows/conda-python-tests.yaml
@@ -121,7 +121,7 @@ jobs:
           role-to-assume: ${{ vars.AWS_ROLE_ARN }}
           aws-region: ${{ vars.AWS_REGION }}
           role-duration-seconds: 43200 # 12h
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
diff --git a/.github/workflows/conda-upload-packages.yaml b/.github/workflows/conda-upload-packages.yaml
index 6a581b70..4615e9d0 100644
--- a/.github/workflows/conda-upload-packages.yaml
+++ b/.github/workflows/conda-upload-packages.yaml
@@ -51,7 +51,7 @@ jobs:
           role-to-assume: ${{ vars.AWS_ROLE_ARN }}
           aws-region: ${{ vars.AWS_REGION }}
           role-duration-seconds: 43200 # 12h
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
diff --git a/.github/workflows/custom-job.yaml b/.github/workflows/custom-job.yaml
index f0d349ed..db14a277 100644
--- a/.github/workflows/custom-job.yaml
+++ b/.github/workflows/custom-job.yaml
@@ -61,7 +61,7 @@ jobs:
           role-to-assume: ${{ vars.AWS_ROLE_ARN }}
           aws-region: ${{ vars.AWS_REGION }}
           role-duration-seconds: 43200 # 12h
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
diff --git a/.github/workflows/wheels-build.yaml b/.github/workflows/wheels-build.yaml
index 33331002..39f545c9 100644
--- a/.github/workflows/wheels-build.yaml
+++ b/.github/workflows/wheels-build.yaml
@@ -123,7 +123,7 @@ jobs:
           aws-region: ${{ vars.AWS_REGION }}
           role-duration-seconds: 43200 # 12h
       - name: checkout code repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
@@ -150,7 +150,7 @@ jobs:
           echo "EXTRA_REPO_PATH=${EXTRA_REPO_PATH}" >> $GITHUB_OUTPUT
 
       - name: checkout extra repos
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         if: ${{ inputs.extra-repo != '' }}
         env:
           GIT_TRACE_PACKET: 1
diff --git a/.github/workflows/wheels-publish.yaml b/.github/workflows/wheels-publish.yaml
index dbcac4d5..f1357415 100644
--- a/.github/workflows/wheels-publish.yaml
+++ b/.github/workflows/wheels-publish.yaml
@@ -53,7 +53,7 @@ jobs:
         aws-region: ${{ vars.AWS_REGION }}
         role-duration-seconds: 43200 # 12h
     - name: checkout code repo
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       env:
         GIT_TRACE_PACKET: 1
         GIT_TRACE: 1
diff --git a/.github/workflows/wheels-test.yaml b/.github/workflows/wheels-test.yaml
index c0ef46b1..af8cd727 100644
--- a/.github/workflows/wheels-test.yaml
+++ b/.github/workflows/wheels-test.yaml
@@ -128,7 +128,7 @@ jobs:
       run: nvidia-smi
 
     - name: checkout code repo
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       env:
         GIT_TRACE_PACKET: 1
         GIT_TRACE: 1