diff --git a/.github/workflows/github-actions-policy-checks.yaml b/.github/workflows/github-actions-policy-checks.yaml
index 5f7a668..5d05f74 100644
--- a/.github/workflows/github-actions-policy-checks.yaml
+++ b/.github/workflows/github-actions-policy-checks.yaml
@@ -29,7 +29,7 @@ jobs:
       contents: read # needed for checking out the code
       security-events: write # Required for upload-sarif to upload SARIF files.
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
       - name: poutine - GitHub Actions SAST
@@ -47,7 +47,7 @@ jobs:
       security-events: write # Required for upload-sarif (used by zizmor-action) to upload SARIF files.
     steps:
       - name: Checkout repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/requirements-tracing.yaml b/.github/workflows/requirements-tracing.yaml
index e296e39..e123414 100644
--- a/.github/workflows/requirements-tracing.yaml
+++ b/.github/workflows/requirements-tracing.yaml
@@ -72,7 +72,7 @@ jobs:
     outputs:
       tracing-report-url: ${{ steps.run-oft.outputs.tracing-report-url }}
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
           submodules: "recursive"
diff --git a/.github/workflows/rust-coverage.yaml b/.github/workflows/rust-coverage.yaml
index 51ee7be..b095072 100644
--- a/.github/workflows/rust-coverage.yaml
+++ b/.github/workflows/rust-coverage.yaml
@@ -39,7 +39,7 @@ jobs:
     outputs:
       test_coverage_url: ${{ steps.test_coverage_html.outputs.artifact-url }}
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
           submodules: "recursive"
diff --git a/.github/workflows/rust-deny-check.yaml b/.github/workflows/rust-deny-check.yaml
index f9ce1cf..79b6afc 100644
--- a/.github/workflows/rust-deny-check.yaml
+++ b/.github/workflows/rust-deny-check.yaml
@@ -54,7 +54,7 @@ jobs:
     continue-on-error: ${{ matrix.checks == 'advisories' }}
 
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
           submodules: "recursive"
diff --git a/.github/workflows/rust-license-report.yaml b/.github/workflows/rust-license-report.yaml
index 25da349..ebcec02 100644
--- a/.github/workflows/rust-license-report.yaml
+++ b/.github/workflows/rust-license-report.yaml
@@ -54,7 +54,7 @@ jobs:
     outputs:
       license_report_url: ${{ steps.license_report.outputs.artifact-url }}
     steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       with:
         persist-credentials: false
         submodules: "recursive"
diff --git a/.github/workflows/rust-test-featurematrix.yaml b/.github/workflows/rust-test-featurematrix.yaml
index d584b78..2c592f3 100644
--- a/.github/workflows/rust-test-featurematrix.yaml
+++ b/.github/workflows/rust-test-featurematrix.yaml
@@ -34,7 +34,7 @@ jobs:
       matrix:
         os: [ubuntu-latest, windows-latest, macOS-latest]
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
           submodules: "recursive"
diff --git a/.github/workflows/rust-verify-latest-deps.yaml b/.github/workflows/rust-verify-latest-deps.yaml
index 97c2da9..d7c7831 100644
--- a/.github/workflows/rust-verify-latest-deps.yaml
+++ b/.github/workflows/rust-verify-latest-deps.yaml
@@ -34,7 +34,7 @@ jobs:
     env:
       CARGO_RESOLVER_INCOMPATIBLE_RUST_VERSIONS: allow
     steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       with:
         persist-credentials: false
         submodules: "recursive"
diff --git a/.github/workflows/rust-verify-msrv.yaml b/.github/workflows/rust-verify-msrv.yaml
index 1749208..1c7ff12 100644
--- a/.github/workflows/rust-verify-msrv.yaml
+++ b/.github/workflows/rust-verify-msrv.yaml
@@ -33,7 +33,7 @@ jobs:
     name: Check crate's MSRV
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       with:
         persist-credentials: false
         submodules: "recursive"
diff --git a/.github/workflows/rust-x-build.yaml b/.github/workflows/rust-x-build.yaml
index fd5f379..f8adaa0 100644
--- a/.github/workflows/rust-x-build.yaml
+++ b/.github/workflows/rust-x-build.yaml
@@ -50,7 +50,7 @@ jobs:
             target: aarch64-apple-darwin
 
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
           submodules: "recursive"