diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml
index e7b8ff24..49a3f206 100644
--- a/.github/workflows/actionlint.yml
+++ b/.github/workflows/actionlint.yml
@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Checkout"
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
index 9951e0bb..ea6f9f94 100644
--- a/.github/workflows/auto-merge.yml
+++ b/.github/workflows/auto-merge.yml
@@ -13,7 +13,7 @@ jobs:
     if: github.event.review.state == 'approved'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Determine PR number
         id: pr
diff --git a/.github/workflows/constraints-update.yml b/.github/workflows/constraints-update.yml
index 0e868aae..a48ce566 100644
--- a/.github/workflows/constraints-update.yml
+++ b/.github/workflows/constraints-update.yml
@@ -16,10 +16,10 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Checkout "update-constraints" in-house CI action
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: instructlab/ci-actions
           path: ci-actions
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index a62b38de..97dc9ed8 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -33,7 +33,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Checkout"
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
       - name: "Check Markdown documents"
diff --git a/.github/workflows/e2e-nvidia-l40s-x4-py312.yml b/.github/workflows/e2e-nvidia-l40s-x4-py312.yml
index 3587eab6..f207b69c 100644
--- a/.github/workflows/e2e-nvidia-l40s-x4-py312.yml
+++ b/.github/workflows/e2e-nvidia-l40s-x4-py312.yml
@@ -25,7 +25,7 @@ jobs:
       ec2-instance-region: ${{ steps.launch-ec2-instance-with-fallback.outputs.ec2-instance-region }}
     steps:
       - name: Checkout "launch-ec2-runner-with-fallback" in-house CI action
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: instructlab/ci-actions
           # clone the "ci-actions" repo to a local directory called "ci-actions", instead of overwriting the current WORKDIR contents
@@ -89,7 +89,7 @@ jobs:
 
     steps:
       - name: Checkout instructlab/training
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: "instructlab/training"
           path: "training"
@@ -155,7 +155,7 @@ jobs:
           path: downloaded-data
 
       - name: Checkout instructlab/training
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: "instructlab/training"
           path: "training"
diff --git a/.github/workflows/e2e-nvidia-l40s-x4-sdk.yml b/.github/workflows/e2e-nvidia-l40s-x4-sdk.yml
index fa63ddab..f54d8579 100644
--- a/.github/workflows/e2e-nvidia-l40s-x4-sdk.yml
+++ b/.github/workflows/e2e-nvidia-l40s-x4-sdk.yml
@@ -24,7 +24,7 @@ jobs:
       ec2-instance-region: ${{ steps.launch-ec2-instance-with-fallback.outputs.ec2-instance-region }}
     steps:
       - name: Checkout "launch-ec2-runner-with-fallback" in-house CI action
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: instructlab/ci-actions
           # clone the "ci-actions" repo to a local directory called "ci-actions", instead of overwriting the current WORKDIR contents
@@ -94,7 +94,7 @@ jobs:
           sudo dnf install -y gcc gcc-c++ make git python3.11 python3.11-devel
   
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           # https://github.com/actions/checkout/issues/249
           fetch-depth: 0
@@ -217,7 +217,7 @@ jobs:
           aws-region: ${{ vars.AWS_REGION }}
 
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           # https://github.com/actions/checkout/issues/249
           fetch-depth: 0
diff --git a/.github/workflows/e2e-nvidia-l40s-x4.yml b/.github/workflows/e2e-nvidia-l40s-x4.yml
index f43e1751..1661a2ec 100644
--- a/.github/workflows/e2e-nvidia-l40s-x4.yml
+++ b/.github/workflows/e2e-nvidia-l40s-x4.yml
@@ -25,7 +25,7 @@ jobs:
       ec2-instance-region: ${{ steps.launch-ec2-instance-with-fallback.outputs.ec2-instance-region }}
     steps:
       - name: Checkout "launch-ec2-runner-with-fallback" in-house CI action
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: instructlab/ci-actions
           # clone the "ci-actions" repo to a local directory called "ci-actions", instead of overwriting the current WORKDIR contents
@@ -89,7 +89,7 @@ jobs:
 
     steps:
       - name: Checkout instructlab/training
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: "instructlab/training"
           path: "training"
@@ -155,7 +155,7 @@ jobs:
           path: downloaded-data
 
       - name: Checkout instructlab/training
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: "instructlab/training"
           path: "training"
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 8c53fc6e..3ae1c6cb 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -60,7 +60,7 @@ jobs:
               tox -e mypy
     steps:
       - name: "Checkout"
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           # https://github.com/actions/checkout/issues/249
           fetch-depth: 0
diff --git a/.github/workflows/pypi.yaml b/.github/workflows/pypi.yaml
index 142124bf..cf529114 100644
--- a/.github/workflows/pypi.yaml
+++ b/.github/workflows/pypi.yaml
@@ -37,7 +37,7 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             - name: "Checkout"
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
               with:
                   # for setuptools-scm
                   fetch-depth: 0
diff --git a/.github/workflows/smoke-py312.yaml b/.github/workflows/smoke-py312.yaml
index e568098d..bdb82d96 100644
--- a/.github/workflows/smoke-py312.yaml
+++ b/.github/workflows/smoke-py312.yaml
@@ -44,7 +44,7 @@ jobs:
       ec2-instance-region: ${{ steps.launch-ec2-instance-with-fallback.outputs.ec2-instance-region }}
     steps:
       - name: Checkout "launch-ec2-runner-with-fallback" in-house CI action
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: instructlab/ci-actions
           # clone the "ci-actions" repo to a local directory called "ci-actions", instead of overwriting the current WORKDIR contents
@@ -108,7 +108,7 @@ jobs:
     permissions: {}
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
           ref: ${{inputs.branch}}
diff --git a/.github/workflows/smoke.yaml b/.github/workflows/smoke.yaml
index 89e24bc7..d8765a76 100644
--- a/.github/workflows/smoke.yaml
+++ b/.github/workflows/smoke.yaml
@@ -40,7 +40,7 @@ jobs:
       ec2-instance-region: ${{ steps.launch-ec2-instance-with-fallback.outputs.ec2-instance-region }}
     steps:
       - name: Checkout "launch-ec2-runner-with-fallback" in-house CI action
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: instructlab/ci-actions
           # clone the "ci-actions" repo to a local directory called "ci-actions", instead of overwriting the current WORKDIR contents
@@ -104,7 +104,7 @@ jobs:
     permissions: {}
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/unit.yaml b/.github/workflows/unit.yaml
index 3634e074..854753c8 100644
--- a/.github/workflows/unit.yaml
+++ b/.github/workflows/unit.yaml
@@ -58,7 +58,7 @@ jobs:
           python-version: "${{ matrix.python }}"
 
       - name: "Checkout code"
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0