diff --git a/.github/workflows/atlas-update.yml b/.github/workflows/atlas-update.yml
index 66956daa67..444b37ac70 100644
--- a/.github/workflows/atlas-update.yml
+++ b/.github/workflows/atlas-update.yml
@@ -14,7 +14,7 @@ jobs:
     if: github.repository == 'WeakAuras/WeakAuras2'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
       - uses: leafo/gh-actions-lua@6919171ccf181b826f44b9bca76307b577217377 # v13.0.0
diff --git a/.github/workflows/build-beta.yml b/.github/workflows/build-beta.yml
index dd90f2f6e5..f5bb424c35 100644
--- a/.github/workflows/build-beta.yml
+++ b/.github/workflows/build-beta.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-22.04
 
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
           persist-credentials: false
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index f8fc384590..63dc21d1fa 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-22.04
 
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
           persist-credentials: false
diff --git a/.github/workflows/discord-update.yaml b/.github/workflows/discord-update.yaml
index 7bf0f622b7..bcb4f5adc0 100644
--- a/.github/workflows/discord-update.yaml
+++ b/.github/workflows/discord-update.yaml
@@ -14,7 +14,7 @@ jobs:
     if: github.repository == 'WeakAuras/WeakAuras2'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
       - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
diff --git a/.github/workflows/issues.yml b/.github/workflows/issues.yml
index 6686e76fa9..593f178e81 100644
--- a/.github/workflows/issues.yml
+++ b/.github/workflows/issues.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/modelpaths-update.yml b/.github/workflows/modelpaths-update.yml
index c8e780978e..66b9e1eecf 100644
--- a/.github/workflows/modelpaths-update.yml
+++ b/.github/workflows/modelpaths-update.yml
@@ -14,7 +14,7 @@ jobs:
     if: github.repository == 'WeakAuras/WeakAuras2'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
       - uses: leafo/gh-actions-lua@6919171ccf181b826f44b9bca76307b577217377 # v13.0.0
diff --git a/.github/workflows/pull_request.yml b/.github/workflows/pull_request.yml
index ce7ce7b727..6aab32dbed 100644
--- a/.github/workflows/pull_request.yml
+++ b/.github/workflows/pull_request.yml
@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-22.04
     needs: [permission_check]
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
           ref: ${{ github.event.pull_request.head.sha }}
diff --git a/.github/workflows/release_notifications.yml b/.github/workflows/release_notifications.yml
index a6f897a7e0..8cbf94b925 100644
--- a/.github/workflows/release_notifications.yml
+++ b/.github/workflows/release_notifications.yml
@@ -18,7 +18,7 @@ jobs:
 
     steps:
       - name: Clone Project
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0  # gets git history for changelogs
           persist-credentials: false
diff --git a/.github/workflows/release_notifications_manual_tests.yml b/.github/workflows/release_notifications_manual_tests.yml
index 14047ac516..a57834e7eb 100644
--- a/.github/workflows/release_notifications_manual_tests.yml
+++ b/.github/workflows/release_notifications_manual_tests.yml
@@ -28,7 +28,7 @@ jobs:
     steps:
       # we first have to clone the AddOn project, this is a required step
       - name: Clone Project
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0  # gets git history for changelogs
           persist-credentials: false