diff --git a/.github/workflows/cache-all.yml b/.github/workflows/cache-all.yml
index aab5cca5..5e771eb6 100644
--- a/.github/workflows/cache-all.yml
+++ b/.github/workflows/cache-all.yml
@@ -23,7 +23,7 @@ jobs:
       matrix:
         suite: ${{ fromJSON(needs.suites.outputs.suites) }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Set up Go
         uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
diff --git a/.github/workflows/cache-one.yml b/.github/workflows/cache-one.yml
index 478aa541..65b973ba 100644
--- a/.github/workflows/cache-one.yml
+++ b/.github/workflows/cache-one.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Cache ${{ inputs.package_manager }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.git-ref }}
 
diff --git a/.github/workflows/dry-run.yml b/.github/workflows/dry-run.yml
index a8efb67d..599af9c8 100644
--- a/.github/workflows/dry-run.yml
+++ b/.github/workflows/dry-run.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Dry run ${{ inputs.test }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.git-ref }}
 
diff --git a/.github/workflows/list-suites.yml b/.github/workflows/list-suites.yml
index b20d1907..b82605e2 100644
--- a/.github/workflows/list-suites.yml
+++ b/.github/workflows/list-suites.yml
@@ -17,7 +17,7 @@ jobs:
   gather:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           # Need history so we can diff against the base SHA.
           fetch-depth: 0
diff --git a/.github/workflows/refresh-artifacts.yml b/.github/workflows/refresh-artifacts.yml
index 9c3b4280..912f53be 100644
--- a/.github/workflows/refresh-artifacts.yml
+++ b/.github/workflows/refresh-artifacts.yml
@@ -20,7 +20,7 @@ jobs:
       matrix:
         suite: ${{ fromJSON(needs.suites.outputs.suites) }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Download artifacts
         run: script/download-cache.sh ${{ matrix.suite }}
       - uses: actions/upload-artifact@v6
diff --git a/.github/workflows/regenerate-test.yml b/.github/workflows/regenerate-test.yml
index dc7bb5f9..4f74fa8e 100644
--- a/.github/workflows/regenerate-test.yml
+++ b/.github/workflows/regenerate-test.yml
@@ -42,7 +42,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Regenerate ${{ inputs.test || inputs.ecosystem }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Resolve test list
         id: tests
@@ -100,7 +100,7 @@ jobs:
       # dependabot-core's own smoke pipeline.
       - name: Checkout dependabot-core
         if: inputs.core-branch != '' || inputs.core-pr-number != ''
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: dependabot/dependabot-core
           path: dependabot-core
diff --git a/.github/workflows/smoke.yml b/.github/workflows/smoke.yml
index 2b455b1f..015fec11 100644
--- a/.github/workflows/smoke.yml
+++ b/.github/workflows/smoke.yml
@@ -29,7 +29,7 @@ jobs:
       matrix:
         suite: ${{ fromJSON(needs.suites.outputs.suites) }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Set up Go
         uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
diff --git a/.github/workflows/yamllint.yml b/.github/workflows/yamllint.yml
index f8146792..6ef5a5fa 100644
--- a/.github/workflows/yamllint.yml
+++ b/.github/workflows/yamllint.yml
@@ -8,7 +8,7 @@ jobs:
   yamllint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       # yamllint is installed in GitHub Actions base runner image: https://github.com/adrienverge/yamllint/pull/588
       - run: yamllint .