diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 56b73566..55dc5beb 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -37,7 +37,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           # The changed-file list is computed by diffing against the base branch, which needs
           # more than the default single commit.
diff --git a/.github/workflows/cross-platform-tests.yml b/.github/workflows/cross-platform-tests.yml
index 034b03b9..07c5da04 100644
--- a/.github/workflows/cross-platform-tests.yml
+++ b/.github/workflows/cross-platform-tests.yml
@@ -34,7 +34,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Set up JDK 17
         uses: actions/setup-java@v6
diff --git a/.github/workflows/dependency-security.yml b/.github/workflows/dependency-security.yml
index e171c855..ff819e41 100644
--- a/.github/workflows/dependency-security.yml
+++ b/.github/workflows/dependency-security.yml
@@ -36,7 +36,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       # NOTE: JDK 17, not the JDK 8 used by gradle.yml. settings.gradle only includes
       # :app-javafx on Java 11+, so a JDK 8 run would silently skip that module's
@@ -149,7 +149,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-java@v6
         with:
           java-version: '17'
@@ -173,7 +173,7 @@ jobs:
       contents: read
       pull-requests: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Fail the PR on newly introduced vulnerable dependencies
         uses: actions/dependency-review-action@v5
         with:
diff --git a/.github/workflows/gradle.yml b/.github/workflows/gradle.yml
index 0b34e564..aea6a8e2 100644
--- a/.github/workflows/gradle.yml
+++ b/.github/workflows/gradle.yml
@@ -21,7 +21,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Set up JDK 8
         uses: actions/setup-java@v6
diff --git a/.github/workflows/validate_gradle.yml b/.github/workflows/validate_gradle.yml
index 7f9cf22c..2a38a5d8 100644
--- a/.github/workflows/validate_gradle.yml
+++ b/.github/workflows/validate_gradle.yml
@@ -15,5 +15,5 @@ jobs:
     name: "Validate Gradle Wrapper SHA-256 checksum"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: gradle/wrapper-validation-action@v3