diff --git a/.github/workflows/auto-merge-comps-update.yml b/.github/workflows/auto-merge-comps-update.yml
index a4f5ecf..4675f23 100644
--- a/.github/workflows/auto-merge-comps-update.yml
+++ b/.github/workflows/auto-merge-comps-update.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3
         id: app-token
         with:
diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
index 01d0532..e6fc453 100644
--- a/.github/workflows/checks.yml
+++ b/.github/workflows/checks.yml
@@ -10,7 +10,7 @@ jobs:
       checks: write
       contents: write
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - uses: bahmutov/npm-install@v1
         with:
@@ -40,7 +40,7 @@ jobs:
     name: Build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - uses: bahmutov/npm-install@v1
         with:
diff --git a/.github/workflows/comps-update.yml b/.github/workflows/comps-update.yml
index 2ed4229..55f5ce5 100644
--- a/.github/workflows/comps-update.yml
+++ b/.github/workflows/comps-update.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - uses: bahmutov/npm-install@v1
         with:
           useLockFile: false
diff --git a/.github/workflows/fix-package-json.yml b/.github/workflows/fix-package-json.yml
index d914bbb..1ae916e 100644
--- a/.github/workflows/fix-package-json.yml
+++ b/.github/workflows/fix-package-json.yml
@@ -15,7 +15,7 @@ jobs:
         with:
           client-id: ${{ secrets.COMMIT_BOT_CLIENT_ID }}
           private-key: ${{ secrets.COMMIT_BOT_PRIVATE_KEY }}
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - uses: bahmutov/npm-install@v1
         with:
           useLockFile: false
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 45c33fe..27317eb 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -25,7 +25,7 @@ jobs:
           release-type: node
           include-component-in-tag: true
         # The logic below handles the npm publication:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         # these if statements ensure that a publication only occurs when
         # a new release is created:
         if: ${{ steps.release.outputs.release_created }}
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index c898ce4..68bff2d 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -7,7 +7,7 @@ jobs:
     name: Frontend Unit Tests
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - uses: bahmutov/npm-install@v1
         with:
           useLockFile: false