diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 0d04224d633e..bb9ba2dfe759 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -21,7 +21,7 @@ jobs:
   client-validate:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - run: corepack enable
 
@@ -37,7 +37,7 @@ jobs:
   client-build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - run: corepack enable
 
@@ -63,7 +63,7 @@ jobs:
     needs: [ client-validate, client-build ]
     runs-on: 8core-ubuntu-latest-frontend
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - run: corepack enable
 
diff --git a/.github/workflows/sbt-dependency-graph.yaml b/.github/workflows/sbt-dependency-graph.yaml
index 21cde00b3cf5..0de9e6a49d06 100644
--- a/.github/workflows/sbt-dependency-graph.yaml
+++ b/.github/workflows/sbt-dependency-graph.yaml
@@ -11,7 +11,7 @@ jobs:
     steps:
       - name: Checkout branch
         id: checkout
-        uses: actions/checkout@9f265659d3bb64ab1440b03b12f4d47a24320917 # v6
+        uses: actions/checkout@v7 # v6
       - name: Install sbt
         uses: guardian/setup-scala@f8b37d4380d93ee5c37739fd8aea97f7c580034a # v1.1.0
       - name: Submit dependencies
diff --git a/.github/workflows/security-txt.yaml b/.github/workflows/security-txt.yaml
index c6c90452502c..715efa27a16e 100644
--- a/.github/workflows/security-txt.yaml
+++ b/.github/workflows/security-txt.yaml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v.6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v.7.0.0
 
       - name: Update Expires field in security.txt
         run: node tools/security-txt.js
diff --git a/.github/workflows/typescript.yml b/.github/workflows/typescript.yml
index 4a8265d9313b..fea85005e302 100644
--- a/.github/workflows/typescript.yml
+++ b/.github/workflows/typescript.yml
@@ -13,7 +13,7 @@ jobs:
         name: Typescript
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@v7
 
             - run: corepack enable
             - uses: actions/setup-node@v6
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index fd203c3097d0..1734a1c345ac 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -12,7 +12,7 @@ jobs:
   validate:
     runs-on: ubuntu-latest
     steps:
-        - uses: actions/checkout@v6
+        - uses: actions/checkout@v7
 
         - run: corepack enable
         - uses: actions/setup-node@v6