diff --git a/.github/workflows/back-to-development.yaml b/.github/workflows/back-to-development.yaml
index 70029fb721..6128a6bdf5 100644
--- a/.github/workflows/back-to-development.yaml
+++ b/.github/workflows/back-to-development.yaml
@@ -16,7 +16,7 @@ jobs:
           app-id: ${{ env.APP_ID }}
           private-key: ${{ secrets.TOKEN_EXCHANGE_GH_APP_PRIVATE_KEY }}
       - name: Checkout repository code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           token: ${{ steps.app_token.outputs.token }}
       - name: Set up Git name and email
diff --git a/.github/workflows/buf-binary-size.yaml b/.github/workflows/buf-binary-size.yaml
index c947061bd1..e0329f9a29 100644
--- a/.github/workflows/buf-binary-size.yaml
+++ b/.github/workflows/buf-binary-size.yaml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: setup-go
         uses: actions/setup-go@v6
         with:
diff --git a/.github/workflows/buf-ci.yaml b/.github/workflows/buf-ci.yaml
index a945c9c135..124d22caf0 100644
--- a/.github/workflows/buf-ci.yaml
+++ b/.github/workflows/buf-ci.yaml
@@ -14,7 +14,7 @@ jobs:
   buf:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: bufbuild/buf-action@v1
         with:
           token: ${{ secrets.BUF_TOKEN }}
diff --git a/.github/workflows/build-and-draft-release.yaml b/.github/workflows/build-and-draft-release.yaml
index 5a7df23377..13e5cce89f 100644
--- a/.github/workflows/build-and-draft-release.yaml
+++ b/.github/workflows/build-and-draft-release.yaml
@@ -26,7 +26,7 @@ jobs:
           app-id: ${{ env.APP_ID }}
           private-key: ${{ secrets.TOKEN_EXCHANGE_GH_APP_PRIVATE_KEY }}
       - name: Checkout repository code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           token: ${{ steps.app_token.outputs.token }}
       - name: Set up Go
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 28a99f64d2..b751a7c21f 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: setup-go
         uses: actions/setup-go@v6
         with:
@@ -59,7 +59,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: setup-go
         uses: actions/setup-go@v6
         with:
diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index ba4b90c9d4..380dbec659 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: setup-go
         uses: actions/setup-go@v6
         with:
diff --git a/.github/workflows/create-release-pr.yaml b/.github/workflows/create-release-pr.yaml
index 432544bc0a..1700a6d273 100644
--- a/.github/workflows/create-release-pr.yaml
+++ b/.github/workflows/create-release-pr.yaml
@@ -18,7 +18,7 @@ jobs:
           app-id: ${{ env.APP_ID }}
           private-key: ${{ secrets.TOKEN_EXCHANGE_GH_APP_PRIVATE_KEY }}
       - name: Checkout repository code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           token: ${{ steps.app_token.outputs.token }}
       - name: Set up Git name and email
diff --git a/.github/workflows/docker-publish.yaml b/.github/workflows/docker-publish.yaml
index 0c57a86930..76d404c931 100644
--- a/.github/workflows/docker-publish.yaml
+++ b/.github/workflows/docker-publish.yaml
@@ -33,7 +33,7 @@ jobs:
           fi
       - name: checkout
         id: checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: refs/tags/v${{ github.event.inputs.version }}
       - name: setup-qemu
diff --git a/.github/workflows/make-upgrade.yaml b/.github/workflows/make-upgrade.yaml
index c3c92e778f..10c897f63d 100644
--- a/.github/workflows/make-upgrade.yaml
+++ b/.github/workflows/make-upgrade.yaml
@@ -16,7 +16,7 @@ jobs:
           app-id: ${{ env.APP_ID }}
           private-key: ${{ secrets.TOKEN_EXCHANGE_GH_APP_PRIVATE_KEY }}
       - name: Checkout repository code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           token: ${{ steps.app_token.outputs.token }}
       - name: setup-go
diff --git a/.github/workflows/previous.yaml b/.github/workflows/previous.yaml
index 778887ced9..07f33efe3e 100644
--- a/.github/workflows/previous.yaml
+++ b/.github/workflows/previous.yaml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: setup-go
         uses: actions/setup-go@v6
         with:
diff --git a/.github/workflows/verify-changelog.yaml b/.github/workflows/verify-changelog.yaml
index 65225b3e38..7d8287e78a 100644
--- a/.github/workflows/verify-changelog.yaml
+++ b/.github/workflows/verify-changelog.yaml
@@ -16,7 +16,7 @@ jobs:
     if: ${{ github.event_name == 'push' || startsWith(github.head_ref, 'release/') || startsWith(github.head_ref, 'next/')}}
     steps:
       - name: Checkout repository code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           fetch-depth: 0
diff --git a/.github/workflows/windows.yaml b/.github/workflows/windows.yaml
index 6c6737c3e8..428ed0fff2 100644
--- a/.github/workflows/windows.yaml
+++ b/.github/workflows/windows.yaml
@@ -25,7 +25,7 @@ jobs:
       - name: support-longpaths
         run: git config --system core.longpaths true
       - name: checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: setup-go
         uses: actions/setup-go@v6
         with: