diff --git a/.github/workflows/ai-issue-assessment.yml b/.github/workflows/ai-issue-assessment.yml
index 189ae959fa..1d4e0c35c7 100644
--- a/.github/workflows/ai-issue-assessment.yml
+++ b/.github/workflows/ai-issue-assessment.yml
@@ -14,7 +14,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Run AI assessment
         uses: github/ai-assessment-comment-labeler@e3bedc38cfffa9179fe4cee8f7ecc93bffb3fee7 # v1.0.1
diff --git a/.github/workflows/code-scanning.yml b/.github/workflows/code-scanning.yml
index ecbe9f0dcb..3abb3f8fd5 100644
--- a/.github/workflows/code-scanning.yml
+++ b/.github/workflows/code-scanning.yml
@@ -41,7 +41,7 @@ jobs:
             runner: '["ubuntu-22.04"]'
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4
diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index 4f452aac41..aaee03d5fb 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -40,7 +40,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       # Install the cosign tool except on PR
       # https://github.com/sigstore/cosign-installer
diff --git a/.github/workflows/docs-check.yml b/.github/workflows/docs-check.yml
index 309eddb38e..99fe8a8248 100644
--- a/.github/workflows/docs-check.yml
+++ b/.github/workflows/docs-check.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout code
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Build UI
       uses: ./.github/actions/build-ui
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index 1fea50114a..8a2045045b 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -23,7 +23,7 @@ jobs:
           git config --global core.eol lf
 
       - name: Check out code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Build UI
         uses: ./.github/actions/build-ui
diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml
index 1004fc2747..a714453e8b 100644
--- a/.github/workflows/goreleaser.yml
+++ b/.github/workflows/goreleaser.yml
@@ -14,7 +14,7 @@ jobs:
 
     steps:
       - name: Check out code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Build UI
         uses: ./.github/actions/build-ui
diff --git a/.github/workflows/license-check.yml b/.github/workflows/license-check.yml
index 2f27353d83..9cd810bd75 100644
--- a/.github/workflows/license-check.yml
+++ b/.github/workflows/license-check.yml
@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Check out code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       # Check out the actual PR branch so we can push changes back if needed
       - name: Check out PR branch
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 5b912cea0f..26734eaa28 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -13,7 +13,7 @@ jobs:
     name: lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Build UI
         uses: ./.github/actions/build-ui
       - uses: actions/setup-go@v6
diff --git a/.github/workflows/mcp-diff.yml b/.github/workflows/mcp-diff.yml
index 62f08bacb0..c0813bc3dc 100644
--- a/.github/workflows/mcp-diff.yml
+++ b/.github/workflows/mcp-diff.yml
@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: Check out code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -80,7 +80,7 @@ jobs:
 
     steps:
       - name: Check out code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/moderator.yml b/.github/workflows/moderator.yml
index 0805a08401..e0726d0146 100644
--- a/.github/workflows/moderator.yml
+++ b/.github/workflows/moderator.yml
@@ -16,7 +16,7 @@ jobs:
       models: read
       contents: read
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: github/ai-moderator@v1
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/registry-releaser.yml b/.github/workflows/registry-releaser.yml
index 5e76f2dc6d..033ba35c3c 100644
--- a/.github/workflows/registry-releaser.yml
+++ b/.github/workflows/registry-releaser.yml
@@ -14,7 +14,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Go
         uses: actions/setup-go@v6