diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9264329..5e896af 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -15,7 +15,7 @@ jobs:
     name: Build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - uses: ./.github/actions/setup-rust
       - name: Rust Build
         run: cargo build --all-features --all-targets
@@ -30,7 +30,7 @@ jobs:
     name: MSRV Check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - name: Get MSRV
         id: msrv
         run: echo "version=$(cargo metadata --format-version 1 --no-deps | jq -r '.packages[0].rust_version')" >> $GITHUB_OUTPUT
@@ -49,7 +49,7 @@ jobs:
       - image=ubuntu24-full-x64
       - tag=bench-codspeed
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - uses: ./.github/actions/setup-rust
 
       - name: Install Codspeed
diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml
index 4d924f2..ca03c29 100644
--- a/.github/workflows/fuzz.yml
+++ b/.github/workflows/fuzz.yml
@@ -10,7 +10,7 @@ jobs:
     name: "fuzz"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - name: Install cargo fuzz
         run: cargo install cargo-fuzz
       - name: Run fuzzing target
diff --git a/.github/workflows/miri.yml b/.github/workflows/miri.yml
index bfdc621..ce9ed3f 100644
--- a/.github/workflows/miri.yml
+++ b/.github/workflows/miri.yml
@@ -18,7 +18,7 @@ jobs:
       RUST_BACKTRACE: 1
       MIRIFLAGS: -Zmiri-strict-provenance -Zmiri-symbolic-alignment-check -Zmiri-backtrace=full
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - name: Run miri with nightly toolchain
         run: |
           rustup toolchain install nightly --component miri
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index cc34b53..57c4321 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -12,7 +12,7 @@ jobs:
   publish-rust:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - uses: ./.github/actions/setup-rust
       - name: Install cargo-edit
         uses: taiki-e/cache-cargo-install-action@511847d4974b3aed52d8daf28cbea5313caf34f3