diff --git a/.github/workflows/build-packages.yaml b/.github/workflows/build-packages.yaml
index e35f493..a2cda3f 100644
--- a/.github/workflows/build-packages.yaml
+++ b/.github/workflows/build-packages.yaml
@@ -34,7 +34,7 @@ jobs:
       packages: ${{ steps.find.outputs.packages }}
       has_packages: ${{ steps.find.outputs.has_packages }}
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
 
@@ -58,7 +58,7 @@ jobs:
       matrix:
         package: ${{ fromJSON(needs.detect.outputs.packages) }}
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.1
 
       - uses: ./.github/actions/setup-nix
         with:
diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index bae51d4..64735d5 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -33,7 +33,7 @@ jobs:
       matrix:
         language: [python, actions]
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.1
 
       - uses: github/codeql-action/init@v4.37.7
         with:
diff --git a/.github/workflows/flake-check.yaml b/.github/workflows/flake-check.yaml
index c3b0d65..aab9d5b 100644
--- a/.github/workflows/flake-check.yaml
+++ b/.github/workflows/flake-check.yaml
@@ -23,7 +23,7 @@ jobs:
     name: nix flake check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.1
 
       - uses: ./.github/actions/setup-nix
         with:
diff --git a/.github/workflows/python-checks.yaml b/.github/workflows/python-checks.yaml
index a2f4966..05ffcff 100644
--- a/.github/workflows/python-checks.yaml
+++ b/.github/workflows/python-checks.yaml
@@ -25,7 +25,7 @@ jobs:
     name: ty + ruff
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.1
 
       - uses: astral-sh/setup-uv@v8.3.2
         with:
diff --git a/.github/workflows/update-pkgs.yaml b/.github/workflows/update-pkgs.yaml
index 93c1d0b..ce122d1 100644
--- a/.github/workflows/update-pkgs.yaml
+++ b/.github/workflows/update-pkgs.yaml
@@ -18,7 +18,7 @@ jobs:
     runs-on: macos-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.1
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
 
diff --git a/.github/workflows/yaml-check.yaml b/.github/workflows/yaml-check.yaml
index 2150e6d..a482904 100644
--- a/.github/workflows/yaml-check.yaml
+++ b/.github/workflows/yaml-check.yaml
@@ -23,7 +23,7 @@ jobs:
     name: yamlfmt
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.1
 
       - uses: actions/setup-go@v6.5.0
         with:
@@ -46,7 +46,7 @@ jobs:
       contents: read
       security-events: write
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.1
 
       - uses: astral-sh/setup-uv@v8.3.2