diff --git a/.github/workflows/build-in-devcontainer.yaml b/.github/workflows/build-in-devcontainer.yaml
index 526828ce..869e80d4 100644
--- a/.github/workflows/build-in-devcontainer.yaml
+++ b/.github/workflows/build-in-devcontainer.yaml
@@ -42,7 +42,7 @@ jobs:
         pkgr: ["conda", "pip"]
     runs-on: "linux-${{ matrix.arch }}-${{ inputs.node_type }}"
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
diff --git a/.github/workflows/checks.yaml b/.github/workflows/checks.yaml
index 61db94c4..0e4ff823 100644
--- a/.github/workflows/checks.yaml
+++ b/.github/workflows/checks.yaml
@@ -36,7 +36,7 @@ jobs:
         RAPIDS_GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
@@ -62,7 +62,7 @@ jobs:
       image: rapidsai/ci-conda:latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
diff --git a/.github/workflows/conda-cpp-build.yaml b/.github/workflows/conda-cpp-build.yaml
index dd50ac4f..df1fdae7 100644
--- a/.github/workflows/conda-cpp-build.yaml
+++ b/.github/workflows/conda-cpp-build.yaml
@@ -83,7 +83,7 @@ jobs:
           role-to-assume: ${{ vars.AWS_ROLE_ARN }}
           aws-region: ${{ vars.AWS_REGION }}
           role-duration-seconds: 43200 # 12h
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
diff --git a/.github/workflows/conda-cpp-post-build-checks.yaml b/.github/workflows/conda-cpp-post-build-checks.yaml
index 05e735c3..5579b146 100644
--- a/.github/workflows/conda-cpp-post-build-checks.yaml
+++ b/.github/workflows/conda-cpp-post-build-checks.yaml
@@ -52,7 +52,7 @@ jobs:
           role-to-assume: ${{ vars.AWS_ROLE_ARN }}
           aws-region: ${{ vars.AWS_REGION }}
           role-duration-seconds: 43200 # 12h
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
@@ -74,7 +74,7 @@ jobs:
           EXTRACTED_DIR=$(rapids-extract-conda-files "${CPP_DIR}")
           echo "RAPIDS_EXTRACTED_DIR=${EXTRACTED_DIR}" >> "${GITHUB_ENV}"
       - name: Get weak detection tool
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
diff --git a/.github/workflows/conda-cpp-tests.yaml b/.github/workflows/conda-cpp-tests.yaml
index 6f4e0859..dbca9b3d 100644
--- a/.github/workflows/conda-cpp-tests.yaml
+++ b/.github/workflows/conda-cpp-tests.yaml
@@ -108,7 +108,7 @@ jobs:
           role-to-assume: ${{ vars.AWS_ROLE_ARN }}
           aws-region: ${{ vars.AWS_REGION }}
           role-duration-seconds: 43200 # 12h
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
diff --git a/.github/workflows/conda-python-build.yaml b/.github/workflows/conda-python-build.yaml
index 263b2be9..a7ae9dba 100644
--- a/.github/workflows/conda-python-build.yaml
+++ b/.github/workflows/conda-python-build.yaml
@@ -86,7 +86,7 @@ jobs:
           role-to-assume: ${{ vars.AWS_ROLE_ARN }}
           aws-region: ${{ vars.AWS_REGION }}
           role-duration-seconds: 43200 # 12h
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
diff --git a/.github/workflows/conda-python-tests.yaml b/.github/workflows/conda-python-tests.yaml
index 4bef1ed9..b2d47eeb 100644
--- a/.github/workflows/conda-python-tests.yaml
+++ b/.github/workflows/conda-python-tests.yaml
@@ -112,7 +112,7 @@ jobs:
           role-to-assume: ${{ vars.AWS_ROLE_ARN }}
           aws-region: ${{ vars.AWS_REGION }}
           role-duration-seconds: 43200 # 12h
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
diff --git a/.github/workflows/conda-upload-packages.yaml b/.github/workflows/conda-upload-packages.yaml
index 45626fcb..e733b12c 100644
--- a/.github/workflows/conda-upload-packages.yaml
+++ b/.github/workflows/conda-upload-packages.yaml
@@ -51,7 +51,7 @@ jobs:
           role-to-assume: ${{ vars.AWS_ROLE_ARN }}
           aws-region: ${{ vars.AWS_REGION }}
           role-duration-seconds: 43200 # 12h
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
diff --git a/.github/workflows/custom-job.yaml b/.github/workflows/custom-job.yaml
index f0d349ed..db14a277 100644
--- a/.github/workflows/custom-job.yaml
+++ b/.github/workflows/custom-job.yaml
@@ -61,7 +61,7 @@ jobs:
           role-to-assume: ${{ vars.AWS_ROLE_ARN }}
           aws-region: ${{ vars.AWS_REGION }}
           role-duration-seconds: 43200 # 12h
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
diff --git a/.github/workflows/wheels-build.yaml b/.github/workflows/wheels-build.yaml
index 3dfabe57..ad1c3cda 100644
--- a/.github/workflows/wheels-build.yaml
+++ b/.github/workflows/wheels-build.yaml
@@ -129,7 +129,7 @@ jobs:
           aws-region: ${{ vars.AWS_REGION }}
           role-duration-seconds: 43200 # 12h
       - name: checkout code repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         env:
           GIT_TRACE_PACKET: 1
           GIT_TRACE: 1
@@ -156,7 +156,7 @@ jobs:
           echo "EXTRA_REPO_PATH=${EXTRA_REPO_PATH}" >> $GITHUB_OUTPUT
 
       - name: checkout extra repos
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         if: ${{ inputs.extra-repo != '' }}
         env:
           GIT_TRACE_PACKET: 1
diff --git a/.github/workflows/wheels-publish.yaml b/.github/workflows/wheels-publish.yaml
index f9d0a6e3..4dc6bff0 100644
--- a/.github/workflows/wheels-publish.yaml
+++ b/.github/workflows/wheels-publish.yaml
@@ -53,7 +53,7 @@ jobs:
         aws-region: ${{ vars.AWS_REGION }}
         role-duration-seconds: 43200 # 12h
     - name: checkout code repo
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       env:
         GIT_TRACE_PACKET: 1
         GIT_TRACE: 1
diff --git a/.github/workflows/wheels-test.yaml b/.github/workflows/wheels-test.yaml
index 8a2ce0bf..63f5b3e4 100644
--- a/.github/workflows/wheels-test.yaml
+++ b/.github/workflows/wheels-test.yaml
@@ -112,7 +112,7 @@ jobs:
       run: nvidia-smi
 
     - name: checkout code repo
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       env:
         GIT_TRACE_PACKET: 1
         GIT_TRACE: 1