diff --git a/.github/workflows/auto-upgrade.yaml b/.github/workflows/auto-upgrade.yaml
index b94ed73b..4e71a2aa 100644
--- a/.github/workflows/auto-upgrade.yaml
+++ b/.github/workflows/auto-upgrade.yaml
@@ -12,7 +12,7 @@ jobs:
     env:
       GITHUB_TOKEN: ${{ github.token }}
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           fetch-depth: 0
       - run: git fetch origin 'refs/notes/*:refs/notes/*'
diff --git a/CHANGELOG.md b/CHANGELOG.md
index ea09d417..c4b1a294 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Changed
+
+- Update actions/checkout to v6.1.0 (giantswarm/external-secrets#267)
+
 ## [2.11.1] - 2026-09-28
 
 ### Fixed