diff --git a/.github/workflows/audit-capture.yml b/.github/workflows/audit-capture.yml
index e8c91cb9..d3e36f9b 100644
--- a/.github/workflows/audit-capture.yml
+++ b/.github/workflows/audit-capture.yml
@@ -43,7 +43,7 @@ jobs:
 
     steps:
       - name: Checkout PPDS
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -111,7 +111,7 @@ jobs:
           repositories: ppds-v1-audit
 
       - name: Checkout audit repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: joshsmithxrm/ppds-v1-audit
           path: audit-repo
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 10161fcc..37b1a41a 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -16,7 +16,7 @@ jobs:
     outputs:
       code: ${{ steps.filter.outputs.code }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: dorny/paths-filter@v4
         id: filter
         with:
@@ -37,7 +37,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Dependency Review
         uses: actions/dependency-review-action@v5
@@ -52,7 +52,7 @@ jobs:
     runs-on: windows-latest
 
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         fetch-depth: 0  # Required for MinVer to read git history
 
@@ -123,7 +123,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 3e8a63aa..3f87862b 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -50,7 +50,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4
diff --git a/.github/workflows/credential-store-interop.yml b/.github/workflows/credential-store-interop.yml
index 8e388e17..5d7f10b1 100644
--- a/.github/workflows/credential-store-interop.yml
+++ b/.github/workflows/credential-store-interop.yml
@@ -40,7 +40,7 @@ jobs:
             env-libsecret: "1"
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/docs-release.yml b/.github/workflows/docs-release.yml
index 17538c02..4af750a3 100644
--- a/.github/workflows/docs-release.yml
+++ b/.github/workflows/docs-release.yml
@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout ppds
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/docs-smoke.yml b/.github/workflows/docs-smoke.yml
index 49003040..d8bbfe7a 100644
--- a/.github/workflows/docs-smoke.yml
+++ b/.github/workflows/docs-smoke.yml
@@ -27,12 +27,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout ppds
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ inputs.ppds_ref }}
 
       - name: Checkout docs
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: ${{ inputs.docs_repo }}
           ref: ${{ inputs.docs_ref }}
diff --git a/.github/workflows/extension-publish.yml b/.github/workflows/extension-publish.yml
index 90672e95..eb326991 100644
--- a/.github/workflows/extension-publish.yml
+++ b/.github/workflows/extension-publish.yml
@@ -32,7 +32,7 @@ jobs:
       startsWith(github.ref, 'refs/tags/Extension-v')
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.ref }}
 
@@ -69,7 +69,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.ref }}
 
diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml
index 1f26bac6..7936e429 100644
--- a/.github/workflows/integration-tests.yml
+++ b/.github/workflows/integration-tests.yml
@@ -59,7 +59,7 @@ jobs:
             filter: Category=Integration&Category!=SecureStorage&Category!=SlowIntegration&(FullyQualifiedName~PPDS.LiveTests.Cli|FullyQualifiedName~PPDS.LiveTests.LiveDataverseSmokeTests)
 
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         fetch-depth: 0
 
diff --git a/.github/workflows/marketplace-listing-gate.yml b/.github/workflows/marketplace-listing-gate.yml
index 9274268a..df5777fb 100644
--- a/.github/workflows/marketplace-listing-gate.yml
+++ b/.github/workflows/marketplace-listing-gate.yml
@@ -35,7 +35,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Python
         uses: actions/setup-python@v6
diff --git a/.github/workflows/milestone-release-check.yml b/.github/workflows/milestone-release-check.yml
index 0ed74825..a2d8fc47 100644
--- a/.github/workflows/milestone-release-check.yml
+++ b/.github/workflows/milestone-release-check.yml
@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Set up Python 3.11
         uses: actions/setup-python@v6
diff --git a/.github/workflows/post-merge-release-check.yml b/.github/workflows/post-merge-release-check.yml
index 36977e8b..5b41b34f 100644
--- a/.github/workflows/post-merge-release-check.yml
+++ b/.github/workflows/post-merge-release-check.yml
@@ -21,7 +21,7 @@ jobs:
 
     steps:
       - name: Checkout main
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: main
           fetch-depth: 0
diff --git a/.github/workflows/pre-merge-gate.yml b/.github/workflows/pre-merge-gate.yml
index 8a545c19..9f270e18 100644
--- a/.github/workflows/pre-merge-gate.yml
+++ b/.github/workflows/pre-merge-gate.yml
@@ -30,7 +30,7 @@ jobs:
     name: Rule 1 — PR size
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: '3.11'
@@ -44,7 +44,7 @@ jobs:
     name: Rule 3 — Major-bump test enforcement
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: '3.11'
diff --git a/.github/workflows/publish-nuget.yml b/.github/workflows/publish-nuget.yml
index 9dc5d40d..f6cb0f97 100644
--- a/.github/workflows/publish-nuget.yml
+++ b/.github/workflows/publish-nuget.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: windows-latest
 
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         fetch-depth: 0  # Required for MinVer to read git history
 
diff --git a/.github/workflows/release-cadence-check.yml b/.github/workflows/release-cadence-check.yml
index fd72d351..60326a76 100644
--- a/.github/workflows/release-cadence-check.yml
+++ b/.github/workflows/release-cadence-check.yml
@@ -18,7 +18,7 @@ jobs:
 
     steps:
       - name: Checkout main (full history)
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: main
           fetch-depth: 0
diff --git a/.github/workflows/release-cli.yml b/.github/workflows/release-cli.yml
index c9a071ff..13157918 100644
--- a/.github/workflows/release-cli.yml
+++ b/.github/workflows/release-cli.yml
@@ -29,7 +29,7 @@ jobs:
     runs-on: ${{ matrix.os }}
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0  # Required for MinVer to read git history
 
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index e5ae85f9..105a160a 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -16,7 +16,7 @@ jobs:
     outputs:
       code: ${{ steps.filter.outputs.code }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: dorny/paths-filter@v4
         id: filter
         with:
@@ -35,7 +35,7 @@ jobs:
     runs-on: windows-latest
 
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         fetch-depth: 0  # Required for MinVer to read git history
 
diff --git a/.github/workflows/tui-e2e.yml b/.github/workflows/tui-e2e.yml
index 92475f99..89fcdf1d 100644
--- a/.github/workflows/tui-e2e.yml
+++ b/.github/workflows/tui-e2e.yml
@@ -28,7 +28,7 @@ jobs:
     timeout-minutes: 30
 
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         fetch-depth: 0
 
diff --git a/.github/workflows/workflow-tests.yml b/.github/workflows/workflow-tests.yml
index 523f587b..d67b4b3e 100644
--- a/.github/workflows/workflow-tests.yml
+++ b/.github/workflows/workflow-tests.yml
@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Python
         uses: actions/setup-python@v6