diff --git a/action.yaml b/action.yaml
index 8ee2107..f621132 100644
--- a/action.yaml
+++ b/action.yaml
@@ -30,7 +30,7 @@ runs:
   using: composite
   steps:
     - name: Checkout
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       with:
         token: ${{ inputs.github_token }}
         # In pull_request_target, use the base repo's synthetic merge ref to avoid cross-repo clones