diff --git a/.github/workflows/pr_chezmoi_init.yaml b/.github/workflows/pr_chezmoi_init.yaml
index 5265e89a..7c893abd 100644
--- a/.github/workflows/pr_chezmoi_init.yaml
+++ b/.github/workflows/pr_chezmoi_init.yaml
@@ -15,7 +15,7 @@ jobs:
       checks: write
     steps:
       - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: dagger call init
         # yamllint disable-line rule:line-length
         uses: dagger/dagger-for-github@27b130bf0f79a7f6fbbbe0fbca6760dc9bb40a77 # v8.4.1
diff --git a/.github/workflows/pr_mise_lock.yaml b/.github/workflows/pr_mise_lock.yaml
index caebe98f..e28660cf 100644
--- a/.github/workflows/pr_mise_lock.yaml
+++ b/.github/workflows/pr_mise_lock.yaml
@@ -20,7 +20,7 @@ jobs:
       pull-requests: write
     steps:
       - name: checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           # should be used for PRs only
           # https://github.com/marketplace/actions/add-commit#working-with-prs
diff --git a/.github/workflows/pr_trunkio.yaml b/.github/workflows/pr_trunkio.yaml
index 7241b3e3..a16d24b4 100644
--- a/.github/workflows/pr_trunkio.yaml
+++ b/.github/workflows/pr_trunkio.yaml
@@ -13,6 +13,6 @@ jobs:
       checks: write
     steps:
       - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: Trunk
         uses: trunk-io/trunk-action@04ba50e7658c81db7356da96657e6e77f220bfa3 # v1.3.1
diff --git a/.github/workflows/trunk_upgrades.yaml b/.github/workflows/trunk_upgrades.yaml
index 35de7840..68d01aa1 100644
--- a/.github/workflows/trunk_upgrades.yaml
+++ b/.github/workflows/trunk_upgrades.yaml
@@ -14,7 +14,7 @@ jobs:
       pull-requests: write # For trunk to create PRs
     steps:
       - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         # pr changes using our GitHub app in order to
         # trigger other actions workflows
       - name: generate app token