diff --git a/.github/workflows/ci-main-pull-request-stub.yml b/.github/workflows/ci-main-pull-request-stub.yml
index d545f05db..1e9a79a30 100644
--- a/.github/workflows/ci-main-pull-request-stub.yml
+++ b/.github/workflows/ci-main-pull-request-stub.yml
@@ -38,7 +38,7 @@ jobs:
       versionFromFile: ${{ steps.set-version-from-file.outputs.versionFromFile }}
     steps:
       - name: 'Checkout repository'
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: 'Detect version from file'
         id: set-version-from-file
diff --git a/.github/workflows/exec.yml b/.github/workflows/exec.yml
index 3c4ba81f5..841a67b30 100644
--- a/.github/workflows/exec.yml
+++ b/.github/workflows/exec.yml
@@ -21,7 +21,7 @@ jobs:
     name: Exec Ohai on ${{ matrix.os }} with Ruby ${{ matrix.ruby }}
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Setup ruby
         uses: ruby/setup-ruby@v1
         with:
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index b46e3bcb1..eb0914c99 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -19,7 +19,7 @@ jobs:
   chefstyle:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: 3.4
@@ -32,7 +32,7 @@ jobs:
     name: Check if all files end in newline
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Linelint
         uses: fernandrone/linelint@master
         id: linelint
diff --git a/.github/workflows/unit.yml b/.github/workflows/unit.yml
index c39888d18..01bc43500 100644
--- a/.github/workflows/unit.yml
+++ b/.github/workflows/unit.yml
@@ -23,7 +23,7 @@ jobs:
     env:
       RUBYOPT: '--disable-error_highlight'
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Setup ruby
         uses: ruby/setup-ruby@v1
         with: