diff --git a/.github/workflows/build-release.yml b/.github/workflows/build-release.yml
index da4a1481..ccf4d9f6 100644
--- a/.github/workflows/build-release.yml
+++ b/.github/workflows/build-release.yml
@@ -25,7 +25,7 @@ jobs:
           echo "name=${TAG}" >> "$GITHUB_OUTPUT"
 
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ steps.tag.outputs.name }}
 
@@ -56,7 +56,7 @@ jobs:
           echo "name=${TAG}" >> "$GITHUB_OUTPUT"
 
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ steps.tag.outputs.name }}
           fetch-depth: 0
diff --git a/.github/workflows/build_pre-release.yml b/.github/workflows/build_pre-release.yml
index 44491e90..7ab1968c 100644
--- a/.github/workflows/build_pre-release.yml
+++ b/.github/workflows/build_pre-release.yml
@@ -25,7 +25,7 @@ jobs:
         echo "name=${TAG}" >> "$GITHUB_OUTPUT"
 
     - name: Checkout code
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         ref: ${{ steps.tag.outputs.name }}
 
@@ -56,7 +56,7 @@ jobs:
         echo "name=${TAG}" >> "$GITHUB_OUTPUT"
 
     - name: Checkout code
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         ref: ${{ steps.tag.outputs.name }}
         fetch-depth: 0
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2fde43a4..9210629c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
@@ -34,7 +34,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
index 3d712188..44bb2c05 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -29,7 +29,7 @@ jobs:
       image: semgrep/semgrep
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Run Semgrep
         # Blocking on push to main / schedule; informative-only on pull requests