diff --git a/.github/workflows/_ha-validate.yml b/.github/workflows/_ha-validate.yml
index 2696253e..6ebdd29e 100644
--- a/.github/workflows/_ha-validate.yml
+++ b/.github/workflows/_ha-validate.yml
@@ -24,7 +24,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: ibiqlik/action-yamllint@v3
         id: yamllint
         with:
@@ -54,7 +54,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: remark-lint
         id: remark
         uses: docker://pipelinecomponents/remark-lint:latest
@@ -84,7 +84,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v7
         with:
           python-version: '3.12'
@@ -156,7 +156,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       # When not running stable: emit a clear 'Skipped' summary, still succeed
       - name: Mark skipped (no relevant config changes)
         if: ${{ !inputs.run_ha_stable }}
@@ -215,7 +215,7 @@ jobs:
       matrix:
         version: [beta, dev]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Install custom component dependencies
         run: .github/scripts/install-custom-component-deps.sh
 
@@ -256,7 +256,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: raven-actions/actionlint@v2
         id: actionlint
         continue-on-error: true
diff --git a/.github/workflows/metrics.yml b/.github/workflows/metrics.yml
index 0289df3a..d86a2b15 100644
--- a/.github/workflows/metrics.yml
+++ b/.github/workflows/metrics.yml
@@ -31,7 +31,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/pull.yml b/.github/workflows/pull.yml
index b52746d8..8029b1eb 100644
--- a/.github/workflows/pull.yml
+++ b/.github/workflows/pull.yml
@@ -20,7 +20,7 @@ jobs:
       config: ${{ steps.filter.outputs.config }}
       esphome: ${{ steps.filter.outputs.esphome }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - id: filter
         uses: dorny/paths-filter@v4
         with:
diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
index 8350d351..71123a27 100644
--- a/.github/workflows/push.yml
+++ b/.github/workflows/push.yml
@@ -70,7 +70,7 @@ jobs:
     outputs:
       esphome: ${{ steps.filter.outputs.esphome }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - id: filter
         uses: dorny/paths-filter@v4
         with:
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 658b25a6..7a958dc7 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -47,7 +47,7 @@ jobs:
       contents: read
       security-events: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-python@v7
         with: