diff --git a/.github/workflows/csharp_test.yml b/.github/workflows/csharp_test.yml
index 787c7ba..641bce4 100644
--- a/.github/workflows/csharp_test.yml
+++ b/.github/workflows/csharp_test.yml
@@ -21,7 +21,7 @@ jobs:
       run:
         working-directory: ./binding
     steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       with:
         submodules: true
         ref: ${{ inputs.checkout-ref || github.head_ref }}
@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: build-native-dev-library
     steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       with:
         submodules: true
         ref: ${{ inputs.checkout-ref || github.head_ref }}
@@ -67,7 +67,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: build-native-dev-library
     steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       with:
         submodules: true
         ref: ${{ inputs.checkout-ref || github.head_ref }}
@@ -100,7 +100,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: build-native-dev-library
     steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       with:
         submodules: true
         ref: ${{ inputs.checkout-ref || github.head_ref }}
diff --git a/.github/workflows/merge-queue-trigger-handler.yml b/.github/workflows/merge-queue-trigger-handler.yml
index f97a531..cd8266f 100644
--- a/.github/workflows/merge-queue-trigger-handler.yml
+++ b/.github/workflows/merge-queue-trigger-handler.yml
@@ -28,7 +28,7 @@ jobs:
         # if use ACT, uncomment-out the following line
         # with:
         #   required-codeowners: 'false'
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
           ref: ${{ fromJSON(steps.precheck.outputs.base-branch) }}
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 3bfc764..5bc23b2 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -11,7 +11,7 @@ jobs:
   validate:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: Validate release version
         id: validate
         run: |
@@ -30,7 +30,7 @@ jobs:
     needs: validate
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - uses: actions/setup-dotnet@9a946fdbd5fb07b82b2f5a4466058b876ab72bb2 # v5.3.0
         with:
           dotnet-version: 10
diff --git a/.github/workflows/submodule_tracker.yml b/.github/workflows/submodule_tracker.yml
index 2f2f281..367c49e 100644
--- a/.github/workflows/submodule_tracker.yml
+++ b/.github/workflows/submodule_tracker.yml
@@ -17,7 +17,7 @@ jobs:
         with:
           app-id: ${{ secrets.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           token: ${{ steps.generate_token.outputs.token }}
           submodules: recursive