diff --git a/.github/workflows/ci-actions-incremental.yml b/.github/workflows/ci-actions-incremental.yml
index e8c50ab15735c..4423a550a06ea 100644
--- a/.github/workflows/ci-actions-incremental.yml
+++ b/.github/workflows/ci-actions-incremental.yml
@@ -110,7 +110,7 @@ jobs:
         run: |
           echo "GE_TAGS=jdk-11" >> "$GITHUB_ENV"
           echo "GE_CUSTOM_VALUES=gh-job-name=Initial JDK 11 Build" >> "$GITHUB_ENV"
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           # this is important for GIB to work
           fetch-depth: 0
@@ -220,7 +220,7 @@ jobs:
       run_quickstarts: ${{ steps.calc-run-flags.outputs.run_quickstarts }}
       run_tcks: ${{ steps.calc-run-flags.outputs.run_tcks }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Calculate matrix from native-tests.json
         id: calc-native-matrix
         run: |
@@ -294,7 +294,7 @@ jobs:
       - name: Support longpaths on Windows
         if: "startsWith(matrix.java.os-name, 'windows')"
         run: git config --global core.longpaths true
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           # this is important for GIB to work
           fetch-depth: 0
@@ -404,7 +404,7 @@ jobs:
       - name: Support longpaths on Windows
         if: "startsWith(matrix.java.os-name, 'windows')"
         run: git config --global core.longpaths true
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           # this is important for GIB to work
           fetch-depth: 0
@@ -494,7 +494,7 @@ jobs:
       - name: Support longpaths on Windows
         if: "startsWith(matrix.java.os-name, 'windows')"
         run: git config --global core.longpaths true
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Restore Maven Repository
         uses: actions/cache/restore@v3
         with:
@@ -568,7 +568,7 @@ jobs:
       - name: Support longpaths on Windows
         if: "startsWith(matrix.java.os-name, 'windows')"
         run: git config --global core.longpaths true
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Restore Maven Repository
         uses: actions/cache/restore@v3
         with:
@@ -642,7 +642,7 @@ jobs:
       - name: Support longpaths on Windows
         if: "startsWith(matrix.java.os-name, 'windows')"
         run: git config --global core.longpaths true
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Restore Maven Repository
         uses: actions/cache/restore@v3
         with:
@@ -706,7 +706,7 @@ jobs:
         run: |
           echo "GE_TAGS=jdk-${{matrix.java.name}}" >> "$GITHUB_ENV"
           echo "GE_CUSTOM_VALUES=gh-job-name=Quickstarts Compilation - JDK ${{matrix.java.name}}" >> "$GITHUB_ENV"
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Restore Maven Repository
         uses: actions/cache/restore@v3
         with:
@@ -757,7 +757,7 @@ jobs:
           category=$(echo -n '${{matrix.category}}' | tr '[:upper:]' '[:lower:]' | tr -c '[:alnum:]-' '-' | sed -E 's/-+/-/g')
           echo "GE_TAGS=virtual-thread-native-${category}" >> "$GITHUB_ENV"
           echo "GE_CUSTOM_VALUES=gh-job-name=Native Tests - Virtual Thread - ${{matrix.category}}" >> "$GITHUB_ENV"
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Restore Maven Repository
         uses: actions/cache/restore@v3
         with:
@@ -809,7 +809,7 @@ jobs:
         run: |
           echo "GE_TAGS=jdk-11" >> "$GITHUB_ENV"
           echo "GE_CUSTOM_VALUES=gh-job-name=MicroProfile TCKs Tests" >> "$GITHUB_ENV"
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           # this is important for GIB to work
           fetch-depth: 0
@@ -888,7 +888,7 @@ jobs:
       - name: Support longpaths on Windows
         if: "startsWith(matrix.os-name, 'windows')"
         run: git config --global core.longpaths true
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Reclaim Disk Space
         run: .github/ci-prerequisites.sh
         if: ${{ !startsWith(matrix.os-name, 'windows') }}
diff --git a/.github/workflows/ci-fork-mvn-cache.yml b/.github/workflows/ci-fork-mvn-cache.yml
index 2ee03ec5b0974..13f7c8d6ce21b 100644
--- a/.github/workflows/ci-fork-mvn-cache.yml
+++ b/.github/workflows/ci-fork-mvn-cache.yml
@@ -35,7 +35,7 @@ jobs:
     # Skip in main repo
     if: github.repository != 'quarkusio/quarkus'
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Reclaim Disk Space
         run: .github/ci-prerequisites.sh
       - name: Set up JDK 11
diff --git a/.github/workflows/ci-istio.yml b/.github/workflows/ci-istio.yml
index 56c80e6fa7cff..b71a4c4d478dc 100644
--- a/.github/workflows/ci-istio.yml
+++ b/.github/workflows/ci-istio.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     if: "github.repository == 'quarkusio/quarkus' || github.event_name == 'workflow_dispatch'"
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: actions/setup-java@v3
         with:
           distribution: 'temurin'
@@ -43,7 +43,7 @@ jobs:
         kubernetes: [v1.20.1]
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - uses: actions/setup-java@v3
         with:
           distribution: 'temurin'
diff --git a/.github/workflows/ci-kubernetes.yml b/.github/workflows/ci-kubernetes.yml
index 65580edf8eb1e..96074f6a9026d 100644
--- a/.github/workflows/ci-kubernetes.yml
+++ b/.github/workflows/ci-kubernetes.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     if: "github.repository == 'quarkusio/quarkus' || github.event_name == 'workflow_dispatch'"
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: actions/setup-java@v3
         with:
           distribution: 'temurin'
@@ -43,7 +43,7 @@ jobs:
         kubernetes: [v1.20.1]
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - uses: actions/setup-java@v3
         with:
           distribution: 'temurin'
@@ -100,7 +100,7 @@ jobs:
         knative: [v1.2.0]
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - uses: actions/setup-java@v3
         with:
           distribution: 'temurin'
@@ -154,7 +154,7 @@ jobs:
         openshift: [v3.11.0]
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - uses: actions/setup-java@v3
         with:
           distribution: 'temurin'
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 4a149f3cf8371..885d9c663cd2c 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -27,7 +27,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         fetch-depth: 1
         ref: main
diff --git a/.github/workflows/deploy-snapshots.yml b/.github/workflows/deploy-snapshots.yml
index d574e472d10b9..9b064a1061c45 100644
--- a/.github/workflows/deploy-snapshots.yml
+++ b/.github/workflows/deploy-snapshots.yml
@@ -15,7 +15,7 @@ jobs:
     env:
       MAVEN_OPTS: -Xmx2048m -XX:MaxMetaspaceSize=1000m
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           ref: main
       - name: Reclaim Disk Space
diff --git a/.github/workflows/doc-build.yml b/.github/workflows/doc-build.yml
index 9b7ed75661fde..98291802a47c9 100644
--- a/.github/workflows/doc-build.yml
+++ b/.github/workflows/doc-build.yml
@@ -32,7 +32,7 @@ jobs:
     # Skip main in forks
     if: "github.repository == 'quarkusio/quarkus' || !endsWith(github.ref, '/main')"
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Set up JDK 11
         uses: actions/setup-java@v3
         with:
diff --git a/.github/workflows/jdk-early-access-build.yml b/.github/workflows/jdk-early-access-build.yml
index f9822c03f7b60..1de2069e26358 100644
--- a/.github/workflows/jdk-early-access-build.yml
+++ b/.github/workflows/jdk-early-access-build.yml
@@ -72,7 +72,7 @@ jobs:
         run: |
           ss -ln
           sudo service mysql stop || true
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           ref: ${{ github.event_name == 'workflow_dispatch' && github.event.ref || 'main' }}
       - name: Reclaim Disk Space
diff --git a/.github/workflows/owasp-check.yml b/.github/workflows/owasp-check.yml
index 11b0c21b35d03..f432a94454e0e 100644
--- a/.github/workflows/owasp-check.yml
+++ b/.github/workflows/owasp-check.yml
@@ -16,7 +16,7 @@ jobs:
     
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         fetch-depth: 1
         ref: main
diff --git a/.github/workflows/podman-build.yml b/.github/workflows/podman-build.yml
index 1a3a4fcb29779..840933b3e146e 100644
--- a/.github/workflows/podman-build.yml
+++ b/.github/workflows/podman-build.yml
@@ -42,7 +42,7 @@ jobs:
       gib_args: ${{ steps.get-gib-args.outputs.gib_args }}
       gib_impacted: ${{ steps.get-gib-impacted.outputs.impacted_modules }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Add quarkusio remote
diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml
index fcf9e6d752219..013c12ee1d464 100644
--- a/.github/workflows/preview.yml
+++ b/.github/workflows/preview.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event.workflow_run.event == 'pull_request' && github.event.workflow_run.conclusion == 'success'
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           repository: quarkusio/quarkusio.github.io
       - name: Download PR Artifact
diff --git a/.github/workflows/quarkus-github-bot-lint.yml b/.github/workflows/quarkus-github-bot-lint.yml
index df593d6938bf6..7a01f94ebce98 100644
--- a/.github/workflows/quarkus-github-bot-lint.yml
+++ b/.github/workflows/quarkus-github-bot-lint.yml
@@ -13,7 +13,7 @@ jobs:
     name: "quarkus-github-bot.yml validation"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: install yamllint
         shell: bash
         run: sudo apt-get install -y yamllint
diff --git a/.github/workflows/release-build.yml b/.github/workflows/release-build.yml
index b865b2b2da716..6e4ea70aff830 100644
--- a/.github/workflows/release-build.yml
+++ b/.github/workflows/release-build.yml
@@ -14,7 +14,7 @@ jobs:
       MAVEN_OPTS: -Xmx2560m
       JBANG_REPO: $HOME/release/repository
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           ref: main
       - name: Reclaim Disk Space
diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml
index e903492fd3172..37ba96684f104 100644
--- a/.github/workflows/sonarcloud.yml
+++ b/.github/workflows/sonarcloud.yml
@@ -11,7 +11,7 @@ jobs:
     name: Build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
       - name: Set up JDK 11
diff --git a/.github/workflows/vale.yml b/.github/workflows/vale.yml
index a72f5421995f7..1aab0e904723a 100644
--- a/.github/workflows/vale.yml
+++ b/.github/workflows/vale.yml
@@ -21,7 +21,7 @@ jobs:
       pull-requests: read
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Vale Linter
         continue-on-error: true
         uses: errata-ai/vale-action@reviewdog