diff --git a/.github/workflows/auto-casdiff-comment.yaml b/.github/workflows/auto-casdiff-comment.yaml
index a0fef49a..9fbb1e7c 100644
--- a/.github/workflows/auto-casdiff-comment.yaml
+++ b/.github/workflows/auto-casdiff-comment.yaml
@@ -19,7 +19,7 @@ jobs:
     if: github.repository == 'bufbuild/modules'
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0  # Need full history to compare branches
 
diff --git a/.github/workflows/buf-ci.yaml b/.github/workflows/buf-ci.yaml
index e9bb361f..89102731 100644
--- a/.github/workflows/buf-ci.yaml
+++ b/.github/workflows/buf-ci.yaml
@@ -20,7 +20,7 @@ jobs:
     if: ${{ github.event_name != 'pull_request' || github.head_ref != 'fetch-modules' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: bufbuild/buf-action@v1
         with:
           token: ${{ secrets.BUF_TOKEN }}
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index a3d94c42..5212bacf 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
       - name: Install Go
diff --git a/.github/workflows/fetch.yaml b/.github/workflows/fetch.yaml
index 54bef485..7591f6a1 100644
--- a/.github/workflows/fetch.yaml
+++ b/.github/workflows/fetch.yaml
@@ -23,7 +23,7 @@ jobs:
           permission-pull-requests: write
           permission-members: read
       - name: Checkout repository code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Install Go
         uses: actions/setup-go@v6
         with:
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 3e84dfea..090252cd 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -21,7 +21,7 @@ jobs:
       did_release: ${{ steps.release.outputs.did_release }}
     steps:
       - name: Checkout repository code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Install Go
         uses: actions/setup-go@v6
         with:
@@ -66,7 +66,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Install Go
         uses: actions/setup-go@v6
         with: