diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index bb876411..79ed81a0 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -26,7 +26,7 @@ jobs:
       dockerhub-rate-source-before: ${{ steps.dockerhub_rate_before.outputs.source }}
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Docker Hub rate limit (before)
         id: dockerhub_rate_before
         env:
@@ -107,7 +107,7 @@ jobs:
         include: ${{ fromJSON(needs.targets.outputs.amd64) }}
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Build via composite action
         uses: ./.github/actions/docker-bake
@@ -129,7 +129,7 @@ jobs:
         include: ${{ fromJSON(needs.targets.outputs.arm64) }}
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Build via composite action
         uses: ./.github/actions/docker-bake
@@ -156,7 +156,7 @@ jobs:
       contents: read
       packages: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Set current date
         id: date
diff --git a/.github/workflows/docker_readme.yml b/.github/workflows/docker_readme.yml
index 0bc51ec6..6d9c4909 100644
--- a/.github/workflows/docker_readme.yml
+++ b/.github/workflows/docker_readme.yml
@@ -16,7 +16,7 @@ jobs:
       repos: ${{ steps.amd64.outputs.families }}
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Generate list of amd64 targets (filtered)
         id: amd64
@@ -35,7 +35,7 @@ jobs:
 
     steps:
       - name: git checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Update repo description
         uses: peter-evans/dockerhub-description@v5
         with:
diff --git a/.github/workflows/generate.yml b/.github/workflows/generate.yml
index e1840d36..0fada281 100644
--- a/.github/workflows/generate.yml
+++ b/.github/workflows/generate.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Python
         uses: actions/setup-python@v6
diff --git a/.github/workflows/setup_labels.yml b/.github/workflows/setup_labels.yml
index a42fc2ad..6fbe89e5 100644
--- a/.github/workflows/setup_labels.yml
+++ b/.github/workflows/setup_labels.yml
@@ -14,7 +14,7 @@ jobs:
   setup-labels:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       
       - name: Setup labels
         id: setup-labels
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index cae0f23a..40886da9 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -12,7 +12,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Set up Python
         uses: actions/setup-python@v6
         with:
@@ -33,7 +33,7 @@ jobs:
   unit-test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Set up Python
         uses: actions/setup-python@v6
@@ -59,7 +59,7 @@ jobs:
       has_changes: ${{ steps.filter.outputs.affected }}
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -114,7 +114,7 @@ jobs:
         include: ${{ fromJSON(needs.targets.outputs.amd64) }}
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Build via composite action
         uses: ./.github/actions/docker-bake
@@ -137,7 +137,7 @@ jobs:
         include: ${{ fromJSON(needs.targets.outputs.arm64) }}
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Build via composite action
         uses: ./.github/actions/docker-bake
@@ -165,7 +165,7 @@ jobs:
       contents: read
       packages: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Download bake metadata artifacts
         uses: actions/download-artifact@v8