diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index fd177ec..09e287b 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -16,7 +16,7 @@ jobs:
       pull-requests: write   # required for the PR comment
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Dependency Review
         # Findings are detected and summarised, but the check is allowed to pass
diff --git a/.github/workflows/format-and-test.yml b/.github/workflows/format-and-test.yml
index bdb2ac5..117517c 100644
--- a/.github/workflows/format-and-test.yml
+++ b/.github/workflows/format-and-test.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
diff --git a/.github/workflows/nightly-secret-scan.yml b/.github/workflows/nightly-secret-scan.yml
index 29f9f3a..fd7b5d2 100644
--- a/.github/workflows/nightly-secret-scan.yml
+++ b/.github/workflows/nightly-secret-scan.yml
@@ -23,7 +23,7 @@ jobs:
 
     steps:
       - name: Checkout full history
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index 25be197..28708d8 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v4