diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 4ecb4ed..c0bf05e 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -57,7 +57,7 @@ jobs:
         # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v7
 
     # Add any setup steps before running the `github/codeql-action/init` action.
     # This includes steps like installing compilers or runtimes (`actions/setup-node`
diff --git a/.github/workflows/cogstack-cohorter-docker.yml b/.github/workflows/cogstack-cohorter-docker.yml
index 2492d1c..2e0b3ec 100644
--- a/.github/workflows/cogstack-cohorter-docker.yml
+++ b/.github/workflows/cogstack-cohorter-docker.yml
@@ -35,7 +35,7 @@ jobs:
 
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Login to DockerHub
         uses: docker/login-action@v3
diff --git a/.github/workflows/doc-build.yml b/.github/workflows/doc-build.yml
index cde4163..25b9a06 100644
--- a/.github/workflows/doc-build.yml
+++ b/.github/workflows/doc-build.yml
@@ -21,7 +21,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v7
       - name: Install uv for Python 3.13
         uses: astral-sh/setup-uv@v6
         with:
diff --git a/.github/workflows/kubernetes-charts-build.yaml b/.github/workflows/kubernetes-charts-build.yaml
index f9d03a5..9bd3b58 100644
--- a/.github/workflows/kubernetes-charts-build.yaml
+++ b/.github/workflows/kubernetes-charts-build.yaml
@@ -37,7 +37,7 @@ jobs:
     if: github.event.pull_request.user.login != 'dependabot[bot]' && github.repository == 'CogStack/cogstack-platform'
     steps:
       - name: Checkout
-        uses: actions/checkout@v5.0.0
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -132,7 +132,7 @@ jobs:
         working-directory: .
 
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Determine version
         id: version
diff --git a/.github/workflows/observability-docker.yml b/.github/workflows/observability-docker.yml
index e505cda..055ad6b 100644
--- a/.github/workflows/observability-docker.yml
+++ b/.github/workflows/observability-docker.yml
@@ -42,7 +42,7 @@ jobs:
             image: cogstacksystems/cogstack-observability-alloy
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Login to DockerHub
         uses: docker/login-action@v3
@@ -85,7 +85,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Set up Python
         uses: actions/setup-python@v4
diff --git a/.github/workflows/ocr-service-docker-smoke.yml b/.github/workflows/ocr-service-docker-smoke.yml
index c9be7b8..2518812 100644
--- a/.github/workflows/ocr-service-docker-smoke.yml
+++ b/.github/workflows/ocr-service-docker-smoke.yml
@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
@@ -101,7 +101,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Pull and start stack (prebuilt image)
         env:
diff --git a/.github/workflows/ocr-service-docker-template.yml b/.github/workflows/ocr-service-docker-template.yml
index 0f09e17..5063a11 100644
--- a/.github/workflows/ocr-service-docker-template.yml
+++ b/.github/workflows/ocr-service-docker-template.yml
@@ -48,7 +48,7 @@ jobs:
             runner: ubuntu-24.04-arm
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: docker/setup-qemu-action@v3
       - uses: docker/setup-buildx-action@v3
 
diff --git a/.github/workflows/ocr-service-tests.yml b/.github/workflows/ocr-service-tests.yml
index 682236c..14d4fc9 100644
--- a/.github/workflows/ocr-service-tests.yml
+++ b/.github/workflows/ocr-service-tests.yml
@@ -40,7 +40,7 @@ jobs:
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
       - name: checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Install Python ${{ matrix.python-version }}
         uses: actions/setup-python@v5