diff --git a/.github/workflows/devtrace.yml b/.github/workflows/devtrace.yml
index d4d1608..9eb1256 100644
--- a/.github/workflows/devtrace.yml
+++ b/.github/workflows/devtrace.yml
@@ -14,7 +14,7 @@ jobs:
     # and scoring the bot itself is not meaningful.
     if: github.actor != 'dependabot[bot]'
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6
       - uses: ./
         with:
           token: ${{ secrets.DEVTRACE_TOKEN }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8c4f549..772a11d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -11,7 +11,7 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v6
         with:
           node-version: '20'
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index abafd1d..63bb332 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -12,7 +12,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v6
         with:
           node-version: '20'