diff --git a/.github/workflows/build-test.yml b/.github/workflows/build-test.yml
index 6cebd5561b..a5611b2d35 100644
--- a/.github/workflows/build-test.yml
+++ b/.github/workflows/build-test.yml
@@ -37,7 +37,7 @@ jobs:
     name: Build / Tests -> JDK-${{ matrix.jdk }}/ Target java-${{ matrix.target }} / ${{ matrix.os }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           # we don't know what commit the last tag was it's safer to get entire repo so previousStableVersion resolves
           fetch-depth: 0
@@ -68,7 +68,7 @@ jobs:
     name: BUILD ${{ github.sha }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           # we don't know what commit the last tag was it's safer to get entire repo so previousStableVersion resolves
           fetch-depth: 0
@@ -111,7 +111,7 @@ jobs:
 
     steps:
        - name: Checkout
-         uses: actions/checkout@v6
+         uses: actions/checkout@v7
          with:
            # we don't know what commit the last tag was it's safer to get entire repo so previousStableVersion resolves
            fetch-depth: 0
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 8b3c356432..e4aec4f300 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -36,7 +36,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Set up JDK ${{ env.DEFAULT_JAVA_VERSION }}
       uses: actions/setup-java@v5
diff --git a/.github/workflows/delete-caches.yml b/.github/workflows/delete-caches.yml
index 851e79b35a..4db1bd4fc5 100644
--- a/.github/workflows/delete-caches.yml
+++ b/.github/workflows/delete-caches.yml
@@ -16,7 +16,7 @@ jobs:
     name: Delete unneeded caches
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - run: |
           gh cache list --limit 500 --order asc --sort last_accessed_at | grep 'play-published-local' > caches.txt || true
           echo "Found $(wc -l < caches.txt | xargs) published local cache entries"