diff --git a/.github/workflows/build-test-and-deploy.yml b/.github/workflows/build-test-and-deploy.yml
index 530b11f3e5..342367edbc 100644
--- a/.github/workflows/build-test-and-deploy.yml
+++ b/.github/workflows/build-test-and-deploy.yml
@@ -28,7 +28,7 @@ jobs:
     runs-on: ubuntu-latest
     name: "Type check, lint, smoke test"
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: ./.github/actions/yarn-install
       - run: yarn typecheck
       - run: yarn typecheck-ts
@@ -39,7 +39,7 @@ jobs:
     runs-on: ubuntu-latest
     name: "Tests with coverage"
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: ./.github/actions/yarn-install
       - run: yarn test-coverage
       - run: "./.github/scripts/install_codecov.sh"
@@ -71,7 +71,7 @@ jobs:
       contents: read
       id-token: write  # Required for npm provenance / OIDC trusted publishing
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: ./.github/actions/yarn-install
       - run: "./.github/scripts/publish.sh"
         env:
diff --git a/.github/workflows/deploy-website.yml b/.github/workflows/deploy-website.yml
index 607b48a5db..db8552645b 100644
--- a/.github/workflows/deploy-website.yml
+++ b/.github/workflows/deploy-website.yml
@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Use Node.js ${{ env.node-version }}
         uses: actions/setup-node@v6
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index de118b5c1f..f3f213fce4 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -20,7 +20,7 @@ jobs:
     name: "Tests [Node.js ${{ inputs.node-version }}, ${{ inputs.runs-on }}, ${{ inputs.no-lockfile == 'false' && 'Using yarn.lock' || 'Ignoring yarn.lock' }}]"
     runs-on: ${{ inputs.runs-on }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: ./.github/actions/yarn-install
         with:
           node-version: ${{ inputs.node-version }}