diff --git a/.github/workflows/deploy_docs.yml b/.github/workflows/deploy_docs.yml
index 76b2da8e..b4a6a529 100644
--- a/.github/workflows/deploy_docs.yml
+++ b/.github/workflows/deploy_docs.yml
@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.0
         with:
           fetch-depth: 0 # full history needed for tag-based version detection
       - name: Setup Bazel with cache
diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml
index 703a7c17..b562dfe1 100644
--- a/.github/workflows/format.yml
+++ b/.github/workflows/format.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.0
       - name: Cache Bazel
         uses: actions/cache@v5
         with:
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 9599c89f..1b398aff 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: 📥 Check out
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.0
       - name: ⚙️ Setup uv
         uses: astral-sh/setup-uv@v7
       - name: 🛠️ Run pre-commit
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index ca25d312..66745e31 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.0
       - name: Install Missing Dependencies
         run: |
           sudo apt-get update