diff --git a/.github/workflows/clang_format.yml b/.github/workflows/clang_format.yml
index f46327c..7646614 100644
--- a/.github/workflows/clang_format.yml
+++ b/.github/workflows/clang_format.yml
@@ -21,7 +21,7 @@ jobs:
     env:
       CLANG_MAJOR_VERSION: 20
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8  # v5.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
 
       - name: Install clang-format
         run: |-
diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml
index 083c157..d34a6ef 100644
--- a/.github/workflows/codespell.yml
+++ b/.github/workflows/codespell.yml
@@ -19,7 +19,7 @@ jobs:
     name: Enforce codespell-clean spelling
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8  # v5.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
 
       - uses: codespell-project/actions-codespell@e3258cca84ce02b0bb36a3d41f2c18f719a0cc1a  # v2.4.3
         with:
diff --git a/.github/workflows/linux_and_macos.yml b/.github/workflows/linux_and_macos.yml
index 341dbb1..eb555ef 100644
--- a/.github/workflows/linux_and_macos.yml
+++ b/.github/workflows/linux_and_macos.yml
@@ -79,7 +79,7 @@ jobs:
           sudo ln -s "$(brew --prefix llvm@${{ matrix.clang_major_version }})"/bin/clang++ /usr/local/bin/clang++-${{ matrix.clang_major_version }}
 
       - name: Checkout Git branch
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8  # v5.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
 
       - name: Build musl Ncurses
         if: "${{ runner.os == 'Linux' && contains(matrix.cc, 'musl') }}"