diff --git a/.github/workflows/build-helper.yml b/.github/workflows/build-helper.yml
index eadb18ce..a58156be 100644
--- a/.github/workflows/build-helper.yml
+++ b/.github/workflows/build-helper.yml
@@ -32,7 +32,7 @@ jobs:
                     #   runner: "windows-11-arm64-16core"
         runs-on: ${{ matrix.runner }}
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@v7
             - name: Install Linux Build Dependencies (Linux only)
               if: matrix.platform == 'linux'
               run: |
diff --git a/.github/workflows/bump-version.yml b/.github/workflows/bump-version.yml
index fa7f31df..7449fb3a 100644
--- a/.github/workflows/bump-version.yml
+++ b/.github/workflows/bump-version.yml
@@ -34,7 +34,7 @@ jobs:
               with:
                   app-id: ${{ vars.WAVE_BUILDER_APPID }}
                   private-key: ${{ secrets.WAVE_BUILDER_KEY }}
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@v7
               with:
                   token: ${{ steps.app-token.outputs.token }}
 
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 30a8979b..c0a603d4 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -63,7 +63,7 @@ jobs:
 
         steps:
             - name: Checkout repository
-              uses: actions/checkout@v6
+              uses: actions/checkout@v7
 
             - name: Install Task
               uses: arduino/setup-task@v2
diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml
index 20f05975..230856a9 100644
--- a/.github/workflows/copilot-setup-steps.yml
+++ b/.github/workflows/copilot-setup-steps.yml
@@ -18,7 +18,7 @@ jobs:
             contents: read
 
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@v7
 
             # Go + Node versions match your helper
             - uses: actions/setup-go@v6
diff --git a/.github/workflows/deploy-docsite.yml b/.github/workflows/deploy-docsite.yml
index 092b024c..6ef1dc7e 100644
--- a/.github/workflows/deploy-docsite.yml
+++ b/.github/workflows/deploy-docsite.yml
@@ -30,7 +30,7 @@ jobs:
         runs-on: ubuntu-latest
         if: github.event.pull_request.draft == false
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@v7
               with:
                   fetch-depth: 0
             - uses: actions/setup-node@v6
diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
index 268e3772..4e26cf72 100644
--- a/.github/workflows/publish-release.yml
+++ b/.github/workflows/publish-release.yml
@@ -11,7 +11,7 @@ jobs:
         if: ${{ startsWith(github.ref, 'refs/tags/') }}
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@v7
             - name: Install Task
               uses: arduino/setup-task@v2
               with:
@@ -30,7 +30,7 @@ jobs:
         needs: [publish-s3]
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@v7
             - name: Install Task
               uses: arduino/setup-task@v2
               with:
@@ -55,7 +55,7 @@ jobs:
         needs: [publish-s3]
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@v7
             - name: Install Task
               uses: arduino/setup-task@v2
               with:
@@ -80,7 +80,7 @@ jobs:
         needs: [publish-s3]
         runs-on: windows-latest
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@v7
             - name: Install Task
               uses: arduino/setup-task@v2
               with:
diff --git a/.github/workflows/testdriver-build.yml b/.github/workflows/testdriver-build.yml
index da190073..e69e94dc 100644
--- a/.github/workflows/testdriver-build.yml
+++ b/.github/workflows/testdriver-build.yml
@@ -41,7 +41,7 @@ jobs:
         runs-on: windows-latest
         if: github.event.pull_request.draft == false
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@v7
 
             # General build dependencies
             - uses: actions/setup-go@v6