diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 876a3de87e..d21bf96248 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -64,10 +64,10 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout with shallow clone
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         if: ${{ !contains(matrix.os.coverage, 'coverage') }}
       - name: Checkout without shallow clone
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         if: ${{ contains(matrix.os.coverage, 'coverage') }}
         with:
           # Disabling shallow clone is recommended for improving relevancy of SonarCloud reporting
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 0d25f1bb78..cfd97824b6 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -41,7 +41,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
diff --git a/.github/workflows/dependency-review-pr.yml b/.github/workflows/dependency-review-pr.yml
index aa54e57db6..9208bc737b 100644
--- a/.github/workflows/dependency-review-pr.yml
+++ b/.github/workflows/dependency-review-pr.yml
@@ -14,6 +14,6 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: 'Checkout Repository'
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: 'Dependency Review'
         uses: actions/dependency-review-action@v4
diff --git a/.github/workflows/generate-demo-preview.yml b/.github/workflows/generate-demo-preview.yml
index aa20e967e5..e68ac0f510 100644
--- a/.github/workflows/generate-demo-preview.yml
+++ b/.github/workflows/generate-demo-preview.yml
@@ -28,7 +28,7 @@ jobs:
     permissions:
       pull-requests: write # surge-preview: PR comments
     steps:
-      - uses: actions/checkout@v5 # access to the local action
+      - uses: actions/checkout@v6 # access to the local action
       - name: surge preview
         uses: ./.github/actions/custom-surge-preview
         with:
diff --git a/.github/workflows/generate-documentation.yml b/.github/workflows/generate-documentation.yml
index 986ef4c43b..328c56d8f0 100644
--- a/.github/workflows/generate-documentation.yml
+++ b/.github/workflows/generate-documentation.yml
@@ -39,7 +39,7 @@ jobs:
     permissions:
       pull-requests: write # surge-preview: PR comments
     steps:
-      - uses: actions/checkout@v5 # access to the local action
+      - uses: actions/checkout@v6 # access to the local action
       - name: surge preview
         uses: ./.github/actions/custom-surge-preview
         with:
@@ -53,7 +53,7 @@ jobs:
     if: (github.event_name == 'push' || github.event_name == 'workflow_dispatch') &&  github.event.ref == 'refs/heads/master'
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Build Setup
         uses: ./.github/actions/build-setup
       - name: Build docs
diff --git a/.github/workflows/notify-new-version-available-on-npm.yml b/.github/workflows/notify-new-version-available-on-npm.yml
index 8cafa23ae7..3705a5b10e 100644
--- a/.github/workflows/notify-new-version-available-on-npm.yml
+++ b/.github/workflows/notify-new-version-available-on-npm.yml
@@ -21,7 +21,7 @@ jobs:
           - bpmn-visualization-R
     steps:
       # Need to checkout to access to the internal action
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Notify that a new bpmn-visualization version is available
         uses: ./.github/actions/notify-PA-repo-of-new-version
         with:
diff --git a/.github/workflows/publish-npm.yml b/.github/workflows/publish-npm.yml
index bbf5b63a4a..19bb7a8989 100644
--- a/.github/workflows/publish-npm.yml
+++ b/.github/workflows/publish-npm.yml
@@ -13,7 +13,7 @@ jobs:
       - name: Set VERSION
         shell: bash
         run: echo "VERSION=${GITHUB_REF#refs/tags/v*}" >> $GITHUB_ENV
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Build Setup
         uses: ./.github/actions/build-setup
         with:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 38ab05930d..afa2c8288f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -14,7 +14,7 @@ jobs:
       - run: |
           echo "New version type: ${{ inputs.type }}"
       - name: Setup checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           # Use a PAT to ensure workflow run are triggered after git push
           token: ${{ secrets.GH_RELEASE_TOKEN }}
diff --git a/.github/workflows/test-e2e.yml b/.github/workflows/test-e2e.yml
index fa72fef159..e58e33eb45 100644
--- a/.github/workflows/test-e2e.yml
+++ b/.github/workflows/test-e2e.yml
@@ -65,7 +65,7 @@ jobs:
             browser: msedge
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Free disk space on Ubuntu runner
         if: runner.os == 'Linux'
         uses: ./.github/actions/free-runner-disk-space-ubuntu
diff --git a/.github/workflows/test-npm-package.yml b/.github/workflows/test-npm-package.yml
index 6375a56e92..dafd722b3d 100644
--- a/.github/workflows/test-npm-package.yml
+++ b/.github/workflows/test-npm-package.yml
@@ -46,7 +46,7 @@ jobs:
       test-bundles-browser: chromium
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Build Setup
         uses: ./.github/actions/build-setup
       - name: Build npm package
diff --git a/.github/workflows/test-performance.yml b/.github/workflows/test-performance.yml
index 2de89ba2f2..1d5b79c475 100644
--- a/.github/workflows/test-performance.yml
+++ b/.github/workflows/test-performance.yml
@@ -37,7 +37,7 @@ jobs:
       browser: chromium
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Build Setup
         uses: ./.github/actions/build-setup
       - name: Install ${{env.browser}}
diff --git a/.github/workflows/upload-demo-archive-and-trigger-examples-repository-update.yml b/.github/workflows/upload-demo-archive-and-trigger-examples-repository-update.yml
index 723eac4e53..ca43424503 100644
--- a/.github/workflows/upload-demo-archive-and-trigger-examples-repository-update.yml
+++ b/.github/workflows/upload-demo-archive-and-trigger-examples-repository-update.yml
@@ -15,7 +15,7 @@ jobs:
     env:
       VERSION: ${{ github.event.client_payload.version || inputs.version }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           ref: v${{ env.VERSION }}
       - name: Build Setup