diff --git a/.github/workflows/cockpit-lib-update.yml b/.github/workflows/cockpit-lib-update.yml
index cd2e5dce2..80e228fd3 100644
--- a/.github/workflows/cockpit-lib-update.yml
+++ b/.github/workflows/cockpit-lib-update.yml
@@ -22,7 +22,7 @@ jobs:
           echo '${{ secrets.GITHUB_TOKEN }}' > ~/.config/github-token
 
       - name: Clone repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Run cockpit-lib-update
         run: |
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 6fb0bdb55..6d1725f4d 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -18,7 +18,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4
diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml
index 779be7c33..e668560c4 100644
--- a/.github/workflows/codespell.yml
+++ b/.github/workflows/codespell.yml
@@ -7,7 +7,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml
index ba717849f..5e1823525 100644
--- a/.github/workflows/dependabot.yml
+++ b/.github/workflows/dependabot.yml
@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: Clone repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index b9e5a8a08..25a7b20ca 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Clone repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Trigger updates-testing scenario
         run: |
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2ff45367c..93a3f8640 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -17,7 +17,7 @@ jobs:
       GH_TOKEN: ${{ github.token }}
     steps:
       - name: Clone repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -60,7 +60,7 @@ jobs:
     permissions: {}
     steps:
       - name: Clone repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up git
         run: |
diff --git a/.github/workflows/reposchutz.yml b/.github/workflows/reposchutz.yml
index 129a64617..dd071d0d1 100644
--- a/.github/workflows/reposchutz.yml
+++ b/.github/workflows/reposchutz.yml
@@ -17,7 +17,7 @@ jobs:
 
     steps:
       - name: Clone target branch
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/tasks-container-update.yml b/.github/workflows/tasks-container-update.yml
index 7fb61a9d8..007aa9413 100644
--- a/.github/workflows/tasks-container-update.yml
+++ b/.github/workflows/tasks-container-update.yml
@@ -23,7 +23,7 @@ jobs:
           echo '${{ secrets.GITHUB_TOKEN }}' > ~/.config/github-token
 
       - name: Clone repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ssh-key: ${{ secrets.DEPLOY_KEY }}
 
diff --git a/.github/workflows/weblate-sync-po.yml b/.github/workflows/weblate-sync-po.yml
index ac3950768..7efd45d31 100644
--- a/.github/workflows/weblate-sync-po.yml
+++ b/.github/workflows/weblate-sync-po.yml
@@ -21,13 +21,13 @@ jobs:
           sudo apt install -y --no-install-recommends gettext
 
       - name: Clone source repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ssh-key: ${{ secrets.DEPLOY_KEY }}
           path: src
 
       - name: Clone weblate repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: ${{ github.repository }}-weblate
           path: weblate
diff --git a/.github/workflows/weblate-sync-pot.yml b/.github/workflows/weblate-sync-pot.yml
index 752c65bf3..be8bf1c04 100644
--- a/.github/workflows/weblate-sync-pot.yml
+++ b/.github/workflows/weblate-sync-pot.yml
@@ -19,7 +19,7 @@ jobs:
           sudo apt install -y --no-install-recommends npm make gettext appstream
 
       - name: Clone source repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           path: src
 
@@ -27,7 +27,7 @@ jobs:
         run: make -C src po/machines.pot
 
       - name: Clone weblate repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           path: weblate
           repository: ${{ github.repository }}-weblate