diff --git a/.github/workflows/bazel.yaml b/.github/workflows/bazel.yaml
index 9dfc0c2e..b3d30dfc 100644
--- a/.github/workflows/bazel.yaml
+++ b/.github/workflows/bazel.yaml
@@ -16,7 +16,7 @@ jobs:
       matrix:
         type: [legacy, bzlmod]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: bazel-contrib/setup-bazel@0.19.0
         with:
           bazelisk-cache: true
diff --git a/.github/workflows/buf-ci.yaml b/.github/workflows/buf-ci.yaml
index da02209c..7147f4c3 100644
--- a/.github/workflows/buf-ci.yaml
+++ b/.github/workflows/buf-ci.yaml
@@ -11,7 +11,7 @@ jobs:
   buf:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: bufbuild/buf-action@v1
         with:
           token: ${{ secrets.BUF_TOKEN }}
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 16876df2..24adaf86 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -13,7 +13,7 @@ jobs:
     name: Test and lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-go@v6
         with:
           go-version-file: tools/go.mod
@@ -25,7 +25,7 @@ jobs:
     name: Check generate
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: bazel-contrib/setup-bazel@0.19.0
         with:
           bazelisk-cache: true
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 09318e58..0d18d8a3 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Create tag
         uses: actions/github-script@v9