diff --git a/.github/workflows/JetLagged.yaml b/.github/workflows/JetLagged.yaml
index 1068a7bfcb..19ddf06e87 100644
--- a/.github/workflows/JetLagged.yaml
+++ b/.github/workflows/JetLagged.yaml
@@ -42,7 +42,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - name: Enable KVM group perms
diff --git a/.github/workflows/JetNews.yaml b/.github/workflows/JetNews.yaml
index 5656a11c10..b5ba586409 100644
--- a/.github/workflows/JetNews.yaml
+++ b/.github/workflows/JetNews.yaml
@@ -42,7 +42,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - name: Enable KVM group perms
diff --git a/.github/workflows/Jetchat.yaml b/.github/workflows/Jetchat.yaml
index 4995ef3ed6..eccae71a21 100644
--- a/.github/workflows/Jetchat.yaml
+++ b/.github/workflows/Jetchat.yaml
@@ -41,7 +41,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - name: Enable KVM group perms
diff --git a/.github/workflows/Release.yml b/.github/workflows/Release.yml
index e64a1048c5..4731b0b5a3 100644
--- a/.github/workflows/Release.yml
+++ b/.github/workflows/Release.yml
@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/Reply.yaml b/.github/workflows/Reply.yaml
index ac678835b8..3c61437baf 100644
--- a/.github/workflows/Reply.yaml
+++ b/.github/workflows/Reply.yaml
@@ -42,7 +42,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - name: Enable KVM group perms
diff --git a/.github/workflows/build-sample.yml b/.github/workflows/build-sample.yml
index 56dbef41b5..5a4d0a5cc0 100644
--- a/.github/workflows/build-sample.yml
+++ b/.github/workflows/build-sample.yml
@@ -39,7 +39,7 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           # https://github.com/diffplug/spotless/issues/710
           # Check out full history for Spotless to ensure ratchetFrom can find the ratchet version
diff --git a/.github/workflows/default-check.yml b/.github/workflows/default-check.yml
index c96635b08b..3c6b5fde2d 100644
--- a/.github/workflows/default-check.yml
+++ b/.github/workflows/default-check.yml
@@ -29,7 +29,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/update_deps.yml b/.github/workflows/update_deps.yml
index 1834f8663b..52dfe22c77 100644
--- a/.github/workflows/update_deps.yml
+++ b/.github/workflows/update_deps.yml
@@ -15,7 +15,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       with:
         persist-credentials: false
     - name: Copy CI gradle.properties