diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 5cfd526..cc7c752 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: Pin Bazel to .bazelversion
         run: echo "USE_BAZEL_VERSION=$(cat .bazelversion)" >> "$GITHUB_ENV"
       - name: Setup Go
@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: Pin Bazel to .bazelversion
         run: echo "USE_BAZEL_VERSION=$(cat .bazelversion)" >> "$GITHUB_ENV"
       - name: Cache bazel
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 454cf5b..acd23ea 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: Create tag
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index 6e86570..2641cf1 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -26,7 +26,7 @@ jobs:
             ~/.cache/bazelisk
             ~/.cache/bazel
           key: ${{ runner.os }}-bazel-${{ matrix.bazel }}-cache
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: bazel test
         run: make test
   macos:
@@ -48,7 +48,7 @@ jobs:
             /private/var/tmp/_bazel_runner
             ~/Library/Caches/bazel
           key: ${{ runner.os }}-bazel-${{ matrix.bazel }}-cache
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: bazel test
         run: make test
   # Disabled due to error in protobuf on Windows