diff --git a/.github/workflows/backport-prs.yml b/.github/workflows/backport-prs.yml
index 418f9e1dfed..b70472f4cb7 100644
--- a/.github/workflows/backport-prs.yml
+++ b/.github/workflows/backport-prs.yml
@@ -27,7 +27,7 @@ jobs:
         contains(github.event.comment.body, '/backport')
       )
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Create backport pull requests
         uses: korthout/backport-action@v3
         with:
diff --git a/.github/workflows/build-and-test-python-wheels.yml b/.github/workflows/build-and-test-python-wheels.yml
index 6b2f54cde77..bebfce7c928 100644
--- a/.github/workflows/build-and-test-python-wheels.yml
+++ b/.github/workflows/build-and-test-python-wheels.yml
@@ -19,7 +19,7 @@ jobs:
       workflow: ${{ steps.build-workflow.outputs.workflow }}
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
       - name: Build workflow
@@ -102,7 +102,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/build-docs.yml b/.github/workflows/build-docs.yml
index 1454f00a071..f1eb2c64424 100644
--- a/.github/workflows/build-docs.yml
+++ b/.github/workflows/build-docs.yml
@@ -70,7 +70,7 @@ jobs:
           fi
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/build-matx.yml b/.github/workflows/build-matx.yml
index 5f3eb59aca9..5f091c33e07 100644
--- a/.github/workflows/build-matx.yml
+++ b/.github/workflows/build-matx.yml
@@ -45,7 +45,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           persist-credentials: false
diff --git a/.github/workflows/build-pytorch.yml b/.github/workflows/build-pytorch.yml
index 6b7ac233320..36134cda971 100644
--- a/.github/workflows/build-pytorch.yml
+++ b/.github/workflows/build-pytorch.yml
@@ -35,7 +35,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           persist-credentials: false
diff --git a/.github/workflows/build-rapids.yml b/.github/workflows/build-rapids.yml
index c517119093e..9f3b394d626 100644
--- a/.github/workflows/build-rapids.yml
+++ b/.github/workflows/build-rapids.yml
@@ -71,7 +71,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           persist-credentials: false
diff --git a/.github/workflows/ci-workflow-nightly.yml b/.github/workflows/ci-workflow-nightly.yml
index 9af5e205475..d094b8b6821 100644
--- a/.github/workflows/ci-workflow-nightly.yml
+++ b/.github/workflows/ci-workflow-nightly.yml
@@ -40,7 +40,7 @@ jobs:
       workflow: ${{ steps.build-workflow.outputs.workflow }}
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
       - name: Build workflow
@@ -126,7 +126,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/ci-workflow-pull-request.yml b/.github/workflows/ci-workflow-pull-request.yml
index 978cea1a287..4a86b6c0953 100644
--- a/.github/workflows/ci-workflow-pull-request.yml
+++ b/.github/workflows/ci-workflow-pull-request.yml
@@ -62,7 +62,7 @@ jobs:
           output matx_enabled    "${{ !contains(github.event.head_commit.message, '[skip-matx]') && !fromJSON(env.skip_tpt) }}"
           output pytorch_enabled "${{ !contains(github.event.head_commit.message, '[skip-pytorch]') && !fromJSON(env.skip_tpt) }}"
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
       - name: Lookup PR info
@@ -182,7 +182,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/ci-workflow-weekly.yml b/.github/workflows/ci-workflow-weekly.yml
index 091863f971e..70082c43539 100644
--- a/.github/workflows/ci-workflow-weekly.yml
+++ b/.github/workflows/ci-workflow-weekly.yml
@@ -39,7 +39,7 @@ jobs:
       workflow: ${{ steps.build-workflow.outputs.workflow }}
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
       - name: Build workflow
@@ -125,7 +125,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/git-bisect.yml b/.github/workflows/git-bisect.yml
index a047221360f..6b45f174156 100644
--- a/.github/workflows/git-bisect.yml
+++ b/.github/workflows/git-bisect.yml
@@ -214,7 +214,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
           fetch-depth: 0          # FULL history
diff --git a/.github/workflows/release-create-new.yml b/.github/workflows/release-create-new.yml
index c79e04ea6d7..bd044e82135 100644
--- a/.github/workflows/release-create-new.yml
+++ b/.github/workflows/release-create-new.yml
@@ -42,7 +42,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Prepare environment
         id: prepare-env
diff --git a/.github/workflows/release-finalize.yml b/.github/workflows/release-finalize.yml
index d478e094d7b..14a3af067c5 100644
--- a/.github/workflows/release-finalize.yml
+++ b/.github/workflows/release-finalize.yml
@@ -54,7 +54,7 @@ jobs:
       next_full_version: ${{ steps.prepare.outputs.next_full_version }}
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Prepare environment
         id: prepare
@@ -234,7 +234,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Create patch version PR
         uses: ./.github/actions/version-update
diff --git a/.github/workflows/release-update-rc.yml b/.github/workflows/release-update-rc.yml
index 24c1b32bbef..1095e249d96 100644
--- a/.github/workflows/release-update-rc.yml
+++ b/.github/workflows/release-update-rc.yml
@@ -32,7 +32,7 @@ jobs:
       tag_name: ${{ steps.prepare.outputs.tag_name }}
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
 
@@ -102,7 +102,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Tag the release candidate
         run: |
diff --git a/.github/workflows/update-branch-version.yml b/.github/workflows/update-branch-version.yml
index e2c3b585fbe..23d41f28507 100644
--- a/.github/workflows/update-branch-version.yml
+++ b/.github/workflows/update-branch-version.yml
@@ -51,7 +51,7 @@ jobs:
       GH_TOKEN: ${{ github.token }}
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ inputs.target_branch }}
 
diff --git a/.github/workflows/verify-devcontainers.yml b/.github/workflows/verify-devcontainers.yml
index 6d111857003..466f75de0b4 100644
--- a/.github/workflows/verify-devcontainers.yml
+++ b/.github/workflows/verify-devcontainers.yml
@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
       with:
         persist-credentials: false
     - name: Setup jq and yq
@@ -112,7 +112,7 @@ jobs:
       contents: read
     steps:
     - name: Check out the code
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
       with:
         persist-credentials: false
 
diff --git a/.github/workflows/workflow-dispatch-standalone-group-linux.yml b/.github/workflows/workflow-dispatch-standalone-group-linux.yml
index d0dc2a63caf..cc56d041301 100644
--- a/.github/workflows/workflow-dispatch-standalone-group-linux.yml
+++ b/.github/workflows/workflow-dispatch-standalone-group-linux.yml
@@ -25,7 +25,7 @@ jobs:
     runs-on: ${{ github.repository == 'NVIDIA/cccl' && matrix.runner || 'ubuntu-latest' }}
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
       - name: Run job
diff --git a/.github/workflows/workflow-dispatch-standalone-group-windows.yml b/.github/workflows/workflow-dispatch-standalone-group-windows.yml
index 9bd0b0c605a..68c9cd881c4 100644
--- a/.github/workflows/workflow-dispatch-standalone-group-windows.yml
+++ b/.github/workflows/workflow-dispatch-standalone-group-windows.yml
@@ -25,7 +25,7 @@ jobs:
         include: ${{ fromJSON(inputs.job-array) }}
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
       - name: Run job
diff --git a/.github/workflows/workflow-dispatch-two-stage-linux.yml b/.github/workflows/workflow-dispatch-two-stage-linux.yml
index b4df0e554e4..74bfb85a5b5 100644
--- a/.github/workflows/workflow-dispatch-two-stage-linux.yml
+++ b/.github/workflows/workflow-dispatch-two-stage-linux.yml
@@ -27,7 +27,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
       - name: Run job
@@ -53,7 +53,7 @@ jobs:
         include: ${{ fromJSON(inputs.consumers) }}
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
       - name: Run job
diff --git a/.github/workflows/workflow-dispatch-two-stage-windows.yml b/.github/workflows/workflow-dispatch-two-stage-windows.yml
index f63302ed39b..586b28068c9 100644
--- a/.github/workflows/workflow-dispatch-two-stage-windows.yml
+++ b/.github/workflows/workflow-dispatch-two-stage-windows.yml
@@ -27,7 +27,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
       - name: Run job
@@ -53,7 +53,7 @@ jobs:
         include: ${{ fromJSON(inputs.consumers) }}
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
       - name: Run job