diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9bf4dd972..c546c015f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -30,7 +30,7 @@ jobs:
         with:
           ruby-version: ${{ matrix.ruby }}
       - name: Checkout repo
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         with:
           persist-credentials: false
       - name: Checkout submodules
diff --git a/.github/workflows/release-generators.yml b/.github/workflows/release-generators.yml
index 8fc19e0aa..5e2feb2f5 100644
--- a/.github/workflows/release-generators.yml
+++ b/.github/workflows/release-generators.yml
@@ -17,7 +17,7 @@ jobs:
       GITHUB_TOKEN: ${{ secrets.YOSHI_CODE_BOT_TOKEN }}
     steps:
       - name: Checkout repo
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         with:
           persist-credentials: false
       - name: Install Ruby 3.4
diff --git a/.github/workflows/tag-generators.yml b/.github/workflows/tag-generators.yml
index 1e475cd58..a8a03fb65 100644
--- a/.github/workflows/tag-generators.yml
+++ b/.github/workflows/tag-generators.yml
@@ -23,7 +23,7 @@ jobs:
       packages: read
     steps:
       - name: Checkout repo
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         with:
           token: ${{ secrets.YOSHI_CODE_BOT_TOKEN }}
           persist-credentials: false