diff --git a/.github/workflows/branch-policy.yml b/.github/workflows/branch-policy.yml
index 7759870..11d996b 100644
--- a/.github/workflows/branch-policy.yml
+++ b/.github/workflows/branch-policy.yml
@@ -16,7 +16,7 @@ jobs:
     name: Validate branch policy
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Validate branch policy
         env:
diff --git a/.github/workflows/e2e-housekeeper.yml b/.github/workflows/e2e-housekeeper.yml
index 50e64a6..c1de748 100644
--- a/.github/workflows/e2e-housekeeper.yml
+++ b/.github/workflows/e2e-housekeeper.yml
@@ -58,7 +58,7 @@ jobs:
       # in the consumer context has org-wide read on private repos so
       # the clone works without an App token.
       - name: Checkout genlayer-e2e
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: genlayerlabs/genlayer-e2e
           token: ${{ github.token }}
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index 7ffb8e3..661de0f 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -637,7 +637,7 @@ jobs:
       # token and can't read the private genlayer-e2e repo (exit 128
       # auth failure on the actions/checkout step — observed on
       # genlayer-node run 26240246363).
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           repository: genlayerlabs/genlayer-e2e
           ref: main
diff --git a/.github/workflows/fast-forward-main.yaml b/.github/workflows/fast-forward-main.yaml
index 688e997..009da4a 100644
--- a/.github/workflows/fast-forward-main.yaml
+++ b/.github/workflows/fast-forward-main.yaml
@@ -25,7 +25,7 @@ jobs:
     if: github.ref_type == 'branch'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index a8c7dea..c0653b1 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -23,7 +23,7 @@ jobs:
     environment: Publish
     steps:
       - name: Checkout tag
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - uses: actions/setup-node@v4
         with:
diff --git a/.github/workflows/retarget-main-prs.yaml b/.github/workflows/retarget-main-prs.yaml
index 37a066f..987d5f0 100644
--- a/.github/workflows/retarget-main-prs.yaml
+++ b/.github/workflows/retarget-main-prs.yaml
@@ -26,7 +26,7 @@ jobs:
     if: github.event.pull_request.base.ref == 'main'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.base.ref }}
 
diff --git a/.github/workflows/smoke.yml b/.github/workflows/smoke.yml
index 13650c2..3fb8f67 100644
--- a/.github/workflows/smoke.yml
+++ b/.github/workflows/smoke.yml
@@ -14,7 +14,7 @@ jobs:
     continue-on-error: true
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-node@v4
         with:
diff --git a/.github/workflows/sync-docs.yml b/.github/workflows/sync-docs.yml
index 080706c..491ba1b 100644
--- a/.github/workflows/sync-docs.yml
+++ b/.github/workflows/sync-docs.yml
@@ -15,7 +15,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout CLI repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -54,7 +54,7 @@ jobs:
           repositories: genlayer-docs
 
       - name: Checkout docs repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           repository: genlayerlabs/genlayer-docs
           token: ${{ steps.app-token.outputs.token }}
diff --git a/.github/workflows/validate-code.yml b/.github/workflows/validate-code.yml
index 0b4707d..1f19df4 100644
--- a/.github/workflows/validate-code.yml
+++ b/.github/workflows/validate-code.yml
@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Install libsecret runtime
         if: runner.os == 'Linux'