diff --git a/.github/workflows/content-aware-hash.yml b/.github/workflows/content-aware-hash.yml
index f4fdf557b8f2c..6650208767224 100644
--- a/.github/workflows/content-aware-hash.yml
+++ b/.github/workflows/content-aware-hash.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Generate Hash
         run: |
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 091ba4fb49d7e..ebbfe26bcdf95 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -19,11 +19,11 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.repository == 'flutter/flutter' }}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
       - name: ./bin/flutter test --coverage
         run: pushd packages/flutter;../../bin/flutter test --coverage -j 1;popd
       - name: upload coverage
-        uses: codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00
+        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f
         with:
           files: packages/flutter/coverage/lcov.info
           verbose: true
diff --git a/.github/workflows/easy-cp.yml b/.github/workflows/easy-cp.yml
index 78bc1d7d67d32..4b4b10665f0f3 100644
--- a/.github/workflows/easy-cp.yml
+++ b/.github/workflows/easy-cp.yml
@@ -46,7 +46,7 @@ jobs:
         run: |
           echo "COMMIT_SHA=$(echo ${{ github.event.pull_request.merge_commit_sha }})" >> $GITHUB_ENV
       - name: Checkout Flutter Repo
-        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
         with:
           repository: flutteractionsbot/flutter
           path: flutter
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index 193049ebb9400..69dfc2480d5f7 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -17,6 +17,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     # Source available at https://github.com/actions/labeler/blob/main/README.md
-    - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b
+    - uses: actions/labeler@f27b608878404679385c85cfa523b85ccb86e213
       with:
         sync-labels: true
diff --git a/.github/workflows/merge-changelog.yml b/.github/workflows/merge-changelog.yml
index 0e40867a8608c..163af29394618 100644
--- a/.github/workflows/merge-changelog.yml
+++ b/.github/workflows/merge-changelog.yml
@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: Setup Repository
-        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           repository: ${{ github.repository }}
           ref: master
diff --git a/.github/workflows/tool-test-general.yml b/.github/workflows/tool-test-general.yml
index d326db08ebeac..c521f521b268e 100644
--- a/.github/workflows/tool-test-general.yml
+++ b/.github/workflows/tool-test-general.yml
@@ -22,7 +22,7 @@ jobs:
 
     steps:
       # Note: we must check out the tree for the composite action to be available
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - uses: ./.github/actions/composite-flutter-setup
 
       - name: Tool Test