diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index a3e00d3..690f9b6 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -15,7 +15,7 @@ jobs:
       contents: read
       packages: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: docker/login-action@v4
         with:
           registry: ghcr.io
@@ -39,7 +39,7 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.event.release.tag_name != '' }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - run: |
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 7114d73..5370153 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -21,21 +21,21 @@ jobs:
         with:
           go-version: ${{ env.GO_VERSION }}
           cache: false
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - run: go mod tidy && git diff --exit-code go.mod go.sum
       - run: go run github.com/elastic/crd-ref-docs@v0.2.0 --config docs/config.yaml --renderer=markdown --output-path docs/api-reference.md --source-path=apis
   helm:
     name: helm-lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - run: helm lint helm/haproxy-operator/ --strict
       - run: helm template chart helm/haproxy-operator > /dev/null
   golangci:
     name: golangci-lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
         with:
           go-version: ${{ env.GO_VERSION }}
@@ -52,7 +52,7 @@ jobs:
         with:
           go-version: ${{ env.GO_VERSION }}
           cache: false
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - run: go run github.com/onsi/ginkgo/v2/ginkgo@v2.29.0 -r --randomize-all --randomize-suites --race --trace --fail-on-pending --keep-going --vet off --cover
       - run: cat coverprofile.out | grep -v "zz_generated." > coverprofile.out.filtered
       #- uses: coverallsapp/github-action@v2