diff --git a/.github/workflows/python-research.yml b/.github/workflows/python-research.yml
index e836099..7d2951d 100644
--- a/.github/workflows/python-research.yml
+++ b/.github/workflows/python-research.yml
@@ -31,7 +31,7 @@ jobs:
         working-directory: ${{ inputs.working-directory }}
     steps:
       - name: Check out source
-        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Install Python
         uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
         with:
diff --git a/.github/workflows/rust-library.yml b/.github/workflows/rust-library.yml
index ac4f68b..fef2618 100644
--- a/.github/workflows/rust-library.yml
+++ b/.github/workflows/rust-library.yml
@@ -79,7 +79,7 @@ jobs:
         working-directory: ${{ inputs.working-directory }}
     steps:
       - name: Check out source
-        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Install exact Rust toolchain
         uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c
         with:
@@ -146,7 +146,7 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Check out source
-        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Check advisories, licenses, bans, and sources
         uses: EmbarkStudios/cargo-deny-action@9c67a826e39827395bfa619cd85cb2aaeb43cfaa
         with:
diff --git a/.github/workflows/rust-research.yml b/.github/workflows/rust-research.yml
index 18fc2df..5ff7899 100644
--- a/.github/workflows/rust-research.yml
+++ b/.github/workflows/rust-research.yml
@@ -39,7 +39,7 @@ jobs:
         working-directory: ${{ inputs.working-directory }}
     steps:
       - name: Check out source
-        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Install Rust
         uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c
         with:
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index bc54703..9d2f885 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Check out source
-        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Install checksum-pinned actionlint 1.7.12
         shell: bash
         run: |
diff --git a/.github/workflows/zig-library.yml b/.github/workflows/zig-library.yml
index c3b4bca..1ebfdcf 100644
--- a/.github/workflows/zig-library.yml
+++ b/.github/workflows/zig-library.yml
@@ -26,7 +26,7 @@ jobs:
         working-directory: ${{ inputs.working-directory }}
     steps:
       - name: Check out source
-        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Install checksum-pinned Zig 0.16.0
         shell: bash
         run: |