diff --git a/.github/workflows/build-ci.yml b/.github/workflows/build-ci.yml
index 75b132332cd..68cd35a4240 100644
--- a/.github/workflows/build-ci.yml
+++ b/.github/workflows/build-ci.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Setup JDKs
         uses: actions/setup-java@v5
@@ -118,7 +118,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Get Semver
         id: semver
diff --git a/.github/workflows/check-ci.yml b/.github/workflows/check-ci.yml
index 9139ce5629e..5610adfefb3 100644
--- a/.github/workflows/check-ci.yml
+++ b/.github/workflows/check-ci.yml
@@ -19,7 +19,7 @@ jobs:
       # Must checkout for push, but not pull_request according to the action
       - name: Checkout
         if: github.event_name != 'pull_request'
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
       - name: Check for non-docs changes
         id: filter
         uses: dorny/paths-filter@v4
@@ -46,7 +46,7 @@ jobs:
         run: df -h
 
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           lfs: true
 
diff --git a/.github/workflows/dependency-submission.yml b/.github/workflows/dependency-submission.yml
index 68955fc312a..83fbd1612ca 100644
--- a/.github/workflows/dependency-submission.yml
+++ b/.github/workflows/dependency-submission.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Setup JDKs
         uses: actions/setup-java@v5
diff --git a/.github/workflows/docs-ci.yml b/.github/workflows/docs-ci.yml
index ef8784075fa..f929b29b3aa 100644
--- a/.github/workflows/docs-ci.yml
+++ b/.github/workflows/docs-ci.yml
@@ -62,7 +62,7 @@ jobs:
       group: core-docs-check-${{ github.workflow }}-${{ github.ref }}
       cancel-in-progress: true
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with: # Does not need lfs to validate since the header file existing is enough for the check
           sparse-checkout: /docs/
           sparse-checkout-cone-mode: false
@@ -84,7 +84,7 @@ jobs:
       cancel-in-progress: true
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           sparse-checkout: /docs/
           sparse-checkout-cone-mode: false
@@ -126,7 +126,7 @@ jobs:
       cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Setup JDKs
         uses: actions/setup-java@v5
@@ -178,7 +178,7 @@ jobs:
       cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Setup JDKs
         uses: actions/setup-java@v5
@@ -230,7 +230,7 @@ jobs:
       cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Setup JDKs
         uses: actions/setup-java@v5
@@ -309,7 +309,7 @@ jobs:
       cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Setup JDKs
         uses: actions/setup-java@v5
@@ -380,7 +380,7 @@ jobs:
       cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Setup JDKs
         uses: actions/setup-java@v5
@@ -435,7 +435,7 @@ jobs:
       cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Setup JDKs
         uses: actions/setup-java@v5
diff --git a/.github/workflows/docs-pr-preview.yml b/.github/workflows/docs-pr-preview.yml
index 4210a50a004..dd76a4e8184 100644
--- a/.github/workflows/docs-pr-preview.yml
+++ b/.github/workflows/docs-pr-preview.yml
@@ -63,7 +63,7 @@ jobs:
       # This has access to secrets. If we run any code provided by the repo at this point, it could be malicious.
       # https://securitylab.github.com/resources/github-actions-preventing-pwn-requests/
       ##########
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           sparse-checkout: /docs/
diff --git a/.github/workflows/docs-sync-check.yml b/.github/workflows/docs-sync-check.yml
index 6053d4a97ef..606b787f41f 100644
--- a/.github/workflows/docs-sync-check.yml
+++ b/.github/workflows/docs-sync-check.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/label-check-ci.yml b/.github/workflows/label-check-ci.yml
index ba6e858e1dd..e2e0866a636 100644
--- a/.github/workflows/label-check-ci.yml
+++ b/.github/workflows/label-check-ci.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Check Documentation Labels
         env:
@@ -29,7 +29,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Check Release Notes Labels
         env:
diff --git a/.github/workflows/links.yml b/.github/workflows/links.yml
index 0772378fbe3..cea1b2af0fa 100644
--- a/.github/workflows/links.yml
+++ b/.github/workflows/links.yml
@@ -13,7 +13,7 @@ jobs:
       issues: write
     if: ${{ github.repository_owner == 'deephaven' }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Link Checker
         id: lychee
diff --git a/.github/workflows/nightly-check-ci.yml b/.github/workflows/nightly-check-ci.yml
index f896b311bc9..08a6dccb798 100644
--- a/.github/workflows/nightly-check-ci.yml
+++ b/.github/workflows/nightly-check-ci.yml
@@ -53,7 +53,7 @@ jobs:
         run: df -h
 
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           lfs: true
 
@@ -147,7 +147,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           lfs: true
 
diff --git a/.github/workflows/nightly-docs.yml b/.github/workflows/nightly-docs.yml
index 931bce957c2..74079ba436b 100644
--- a/.github/workflows/nightly-docs.yml
+++ b/.github/workflows/nightly-docs.yml
@@ -12,7 +12,7 @@ jobs:
     if: github.ref == 'refs/heads/main' && github.repository_owner == 'deephaven' # Don't run on forks that haven't disabled actions
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           sparse-checkout: /docs/
           sparse-checkout-cone-mode: false
@@ -33,7 +33,7 @@ jobs:
     if: github.ref == 'refs/heads/main' && github.repository_owner == 'deephaven' # Don't run on forks that haven't disabled actions
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v7
       with:
         sparse-checkout: /docs/
         sparse-checkout-cone-mode: false
diff --git a/.github/workflows/nightly-image-check.yml b/.github/workflows/nightly-image-check.yml
index e937d1ba103..28bc66d4d31 100644
--- a/.github/workflows/nightly-image-check.yml
+++ b/.github/workflows/nightly-image-check.yml
@@ -11,7 +11,7 @@ jobs:
     if: ${{ github.repository_owner == 'deephaven' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Setup JDKs
         uses: actions/setup-java@v5
diff --git a/.github/workflows/nightly-publish-ci.yml b/.github/workflows/nightly-publish-ci.yml
index bd5d40fb786..cf1ed2369ba 100644
--- a/.github/workflows/nightly-publish-ci.yml
+++ b/.github/workflows/nightly-publish-ci.yml
@@ -17,7 +17,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Setup JDKs
         uses: actions/setup-java@v5
diff --git a/.github/workflows/pr-merge-webhook.yml b/.github/workflows/pr-merge-webhook.yml
index 7a0e5889d84..a8db1a077a1 100644
--- a/.github/workflows/pr-merge-webhook.yml
+++ b/.github/workflows/pr-merge-webhook.yml
@@ -14,7 +14,7 @@ jobs:
     if: github.event.pull_request.merged
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Trigger PR Merge Webhook
         env:
diff --git a/.github/workflows/publish-ci.yml b/.github/workflows/publish-ci.yml
index 347b24e75c4..b5256e6a336 100644
--- a/.github/workflows/publish-ci.yml
+++ b/.github/workflows/publish-ci.yml
@@ -19,7 +19,7 @@ jobs:
       # Must checkout for push, but not pull_request according to the action
       - name: Checkout
         if: github.event_name != 'pull_request'
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
       - name: Check for non-docs changes
         id: filter
         uses: dorny/paths-filter@v4
@@ -48,7 +48,7 @@ jobs:
         run: df -h
 
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Setup JDKs
         uses: actions/setup-java@v5
diff --git a/.github/workflows/quick-ci.yml b/.github/workflows/quick-ci.yml
index 9a9c5b8ee4a..5f309adec7b 100644
--- a/.github/workflows/quick-ci.yml
+++ b/.github/workflows/quick-ci.yml
@@ -19,7 +19,7 @@ jobs:
       # Must checkout for push, but not pull_request according to the action
       - name: Checkout
         if: github.event_name != 'pull_request'
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
       - name: Check for non-docs changes
         id: filter
         uses: dorny/paths-filter@v4
@@ -36,7 +36,7 @@ jobs:
     if: ${{ needs.changes.outputs.non-docs == 'true' || startsWith(github.ref, 'refs/heads/release/v') }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Check gitignore rules
         run: .github/scripts/check-gitignore-rules.sh
@@ -73,7 +73,7 @@ jobs:
     needs: changes
     if: ${{ needs.changes.outputs.non-docs == 'true' || startsWith(github.ref, 'refs/heads/release/v') }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v5
         with:
           python-version: '3.12'
diff --git a/.github/workflows/tag-base-images.yml b/.github/workflows/tag-base-images.yml
index caa49a8fa19..34af09022fc 100644
--- a/.github/workflows/tag-base-images.yml
+++ b/.github/workflows/tag-base-images.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Setup JDKs
         uses: actions/setup-java@v5
diff --git a/.github/workflows/update-web.yml b/.github/workflows/update-web.yml
index baec7678e18..72877ccbe3a 100644
--- a/.github/workflows/update-web.yml
+++ b/.github/workflows/update-web.yml
@@ -7,7 +7,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout latest
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           ref: main
           sparse-checkout: |