diff --git a/.github/workflows/adr-lint.yml b/.github/workflows/adr-lint.yml
index 42a0022..5ddd165 100644
--- a/.github/workflows/adr-lint.yml
+++ b/.github/workflows/adr-lint.yml
@@ -14,7 +14,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Validate ADR structure
         shell: bash
diff --git a/.github/workflows/ci-ubuntu-minimal.yml b/.github/workflows/ci-ubuntu-minimal.yml
index 5fd4549..bdb218c 100644
--- a/.github/workflows/ci-ubuntu-minimal.yml
+++ b/.github/workflows/ci-ubuntu-minimal.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Verify PowerShell version
         shell: pwsh
@@ -39,7 +39,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Verify PowerShell version
         shell: pwsh
diff --git a/.github/workflows/ci-windows-signed.yml b/.github/workflows/ci-windows-signed.yml
index 8b42739..2a2b467 100644
--- a/.github/workflows/ci-windows-signed.yml
+++ b/.github/workflows/ci-windows-signed.yml
@@ -27,7 +27,7 @@ jobs:
     timeout-minutes: 45
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 555416a..4d59890 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -20,7 +20,7 @@ jobs:
       fail-fast: false
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4
diff --git a/.github/workflows/codesign-secrets-bootstrap.yml b/.github/workflows/codesign-secrets-bootstrap.yml
index 97d30b3..8372e12 100644
--- a/.github/workflows/codesign-secrets-bootstrap.yml
+++ b/.github/workflows/codesign-secrets-bootstrap.yml
@@ -22,7 +22,7 @@ jobs:
     env:
       GH_PAT_FOR_SECRETS: ${{ secrets.CODESIGN_SECRETS_TOKEN }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Provision codesign secrets
         shell: pwsh
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index e5475ba..4b8bb13 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -22,7 +22,7 @@ jobs:
         src/Core.psm1,
         tools/Build.ps1
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Install Pester v6 (fallback to latest stable)
         shell: pwsh
diff --git a/.github/workflows/docs-link-check.yml b/.github/workflows/docs-link-check.yml
index 0c5a417..664e2ec 100644
--- a/.github/workflows/docs-link-check.yml
+++ b/.github/workflows/docs-link-check.yml
@@ -16,7 +16,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Check links with lychee
         uses: lycheeverse/lychee-action@v1
diff --git a/.github/workflows/handshake-watchdog.yml b/.github/workflows/handshake-watchdog.yml
index 2cb65d8..00bd9ab 100644
--- a/.github/workflows/handshake-watchdog.yml
+++ b/.github/workflows/handshake-watchdog.yml
@@ -26,7 +26,7 @@ jobs:
       actions: read
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Compute watchdog configuration
         id: config
diff --git a/.github/workflows/local-ci-handshake.yml b/.github/workflows/local-ci-handshake.yml
index 619b74c..245a5e6 100644
--- a/.github/workflows/local-ci-handshake.yml
+++ b/.github/workflows/local-ci-handshake.yml
@@ -23,7 +23,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
@@ -46,7 +46,7 @@ jobs:
       manifest_abs: ${{ steps.capture-meta.outputs.manifest_abs }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
@@ -201,7 +201,7 @@ jobs:
       WINDOWS_RUNNER_LABELS: ${{ vars.LOCALCI_WINDOWS_RUNS_ON || '["self-hosted","Windows","X64"]' }}
     steps:
       - name: Checkout workflow helpers
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           sparse-checkout: |
             scripts/workflows
@@ -215,7 +215,7 @@ jobs:
           python3 scripts/workflows/check_windows_runner_coverage.py
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/psscriptanalyzer.yml b/.github/workflows/psscriptanalyzer.yml
index 0d50987..8b52bd9 100644
--- a/.github/workflows/psscriptanalyzer.yml
+++ b/.github/workflows/psscriptanalyzer.yml
@@ -14,7 +14,7 @@ jobs:
   pssa:
     runs-on: windows-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Install PSScriptAnalyzer
         shell: pwsh
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index afb073a..ce4ea7a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -21,7 +21,7 @@ jobs:
         src/tools/ConsoleWatch.psm1,
         src/tools/Vipm.psm1
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Install Pester v6 (fallback to latest stable)
         shell: pwsh
diff --git a/.github/workflows/vscode-extension.yml b/.github/workflows/vscode-extension.yml
index a7d3daf..a3fef4e 100644
--- a/.github/workflows/vscode-extension.yml
+++ b/.github/workflows/vscode-extension.yml
@@ -23,7 +23,7 @@ jobs:
       run:
         working-directory: src/tools/vscode/comparevi-extension
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - uses: actions/setup-node@v4
         with: