diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index e88bf48bc..aed8643d5 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -30,7 +30,7 @@ jobs:
       matrix: "{\"container\": ${{ steps.reduce.outputs.containers }} }"
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         repository: ${{ github.repository }}
         token: ${{ secrets.CR_PAT }}
@@ -76,7 +76,7 @@ jobs:
     if: "!contains(github.event.head_commit.message, '[ci-skip]')"
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         repository: ${{ github.repository }}
         token: ${{ secrets.CR_PAT }}
diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml
index ae431c689..4b2a739c6 100644
--- a/.github/workflows/renovate.yaml
+++ b/.github/workflows/renovate.yaml
@@ -40,7 +40,7 @@ jobs:
           private_key: "${{ secrets.BOT_APP_PRIVATE_KEY }}"
 
       - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           token: "${{ steps.generate-token.outputs.token }}"
 
diff --git a/.github/workflows/schedule.yaml b/.github/workflows/schedule.yaml
index d20145022..bebde28fe 100644
--- a/.github/workflows/schedule.yaml
+++ b/.github/workflows/schedule.yaml
@@ -17,7 +17,7 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         token: ${{ secrets.CR_PAT }}
         fetch-depth: 0
diff --git a/.github/workflows/update-packages.yml b/.github/workflows/update-packages.yml
index 2223169a8..68077a3b3 100644
--- a/.github/workflows/update-packages.yml
+++ b/.github/workflows/update-packages.yml
@@ -17,7 +17,7 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         token: ${{ secrets.CR_PAT }}
         fetch-depth: 0