diff --git a/.github/workflows/berkeley-cluster-tests-1.yml b/.github/workflows/berkeley-cluster-tests-1.yml
index fcee915f..fecd6507 100644
--- a/.github/workflows/berkeley-cluster-tests-1.yml
+++ b/.github/workflows/berkeley-cluster-tests-1.yml
@@ -58,7 +58,7 @@ jobs:
         ((steps.filter.outputs.conda-reqs == 'true') && (steps.filter.outputs.conda-lockfile == 'true')) }}
       run-cpp-lint: ${{ steps.filter.outputs.clang == 'true' }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: dorny/paths-filter@v3
         id: filter
         with:
@@ -115,7 +115,7 @@ jobs:
     runs-on: ubuntu-22.04
     needs: filter-jobs-on-changes
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: conda-incubator/setup-miniconda@v3
         with:
           environment-file: conda-reqs/docs.yaml
@@ -147,7 +147,7 @@ jobs:
             rm -rf ${{ github.workspace }}/* || true
             rm -rf ${{ github.workspace }}/.* || true
             ls -alh .
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Setup repo copy
         run: |
           mkdir -p $(dirname ${{ env.REMOTE_WORK_DIR }})
@@ -165,7 +165,7 @@ jobs:
     runs-on: local-fpga
     if: needs.filter-jobs-on-changes.outputs.run-cpp-lint == 'true'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       # TODO: disabled for now. clang-format error's with no modifications
       ## Run 'clang-format', comparing against the base commit hash.
       ## If anything got reformatted, fail and output a patch.
@@ -198,7 +198,7 @@ jobs:
     needs: [setup-persistent-repo]
     runs-on: local-fpga
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Scala fix + format check
         run: ./.github/scripts/invoke-make.py "scala-lint-check"
 
@@ -207,7 +207,7 @@ jobs:
     needs: [setup-persistent-repo]
     runs-on: local-fpga
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Manager Python formatting check using 'black'
         run: ./.github/scripts/invoke-script.py "./scripts/run-manager-python-reformat.sh --check"
       - name: CI Python typecheck
@@ -220,7 +220,7 @@ jobs:
     needs: [setup-persistent-repo]
     runs-on: local-fpga
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Check docs components that require manual re-generation (e.g. config_runtime.yaml example)
         run: ./.github/scripts/check-docs-generated-components.py --platform xilinx_alveo_u250
 
@@ -229,7 +229,7 @@ jobs:
     needs: [setup-persistent-repo]
     runs-on: local-fpga
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Build driver
         run: .github/scripts/build-driver.py --platform xilinx_alveo_u250
 
diff --git a/.github/workflows/berkeley-cluster-tests-2.yml b/.github/workflows/berkeley-cluster-tests-2.yml
index 2cca4885..f658d949 100644
--- a/.github/workflows/berkeley-cluster-tests-2.yml
+++ b/.github/workflows/berkeley-cluster-tests-2.yml
@@ -63,7 +63,7 @@ jobs:
         ((steps.filter.outputs.conda-reqs == 'true') && (steps.filter.outputs.conda-lockfile == 'true')) }}
       run-cpp-lint: ${{ steps.filter.outputs.clang == 'true' }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: dorny/paths-filter@v3
         id: filter
         with:
@@ -114,7 +114,7 @@ jobs:
             rm -rf ${{ github.workspace }}/* || true
             rm -rf ${{ github.workspace }}/.* || true
             ls -alh .
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Setup repo copy
         run: |
           mkdir -p $(dirname ${{ env.REMOTE_WORK_DIR }})
@@ -135,7 +135,7 @@ jobs:
     if: ${{ contains(github.event.pull_request.labels.*.name, 'ci:disable-scala-tests') != true }}
     runs-on: local-fpga-shared # since this is a longer lived job, can run on either runner
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Precompile scala sources needed for tests
         run: ./.github/scripts/invoke-make.py "FIRESIM_SBT_PROJECT=firesim SBT_COMMAND=test:compile sbt"
 
@@ -144,7 +144,7 @@ jobs:
     needs: [start-scalatests]
     runs-on: local-fpga-2
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Run firesimlib scala tests
         run: ./.github/scripts/invoke-make.py "FIRESIM_SBT_PROJECT=firesimLib test"
 
@@ -153,7 +153,7 @@ jobs:
     needs: [start-scalatests]
     runs-on: local-fpga-2
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Run midas and midas-targetutils scala tests
         run: ./.github/scripts/invoke-make.py "FIRESIM_SBT_PROJECT=midas test"
 
@@ -162,7 +162,7 @@ jobs:
     needs: [start-scalatests]
     runs-on: local-fpga-shared # since this is a longer lived job, can run on either runner
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Run CIGroupA Scala tests
         run: ./.github/scripts/invoke-make.py "SCALA_TEST=firesim.midasexamples.CIGroupA testOnly"
 
@@ -171,7 +171,7 @@ jobs:
     needs: [start-scalatests]
     runs-on: local-fpga-shared # since this is a longer lived job, can run on either runner
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Run CIGroupB Scala tests
         run: ./.github/scripts/invoke-make.py "SCALA_TEST=firesim.midasexamples.CIGroupB testOnly"
 
@@ -180,7 +180,7 @@ jobs:
     needs: [start-scalatests]
     runs-on: local-fpga-2
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Run simple counter top-level example
         continue-on-error: true
         run: ./.github/scripts/invoke-make.py "TARGET_PROJECT=examples run-vcs" 2>&1 | tee out.log
diff --git a/.github/workflows/publish-scala-doc.yml b/.github/workflows/publish-scala-doc.yml
index 804098b9..aaccc970 100644
--- a/.github/workflows/publish-scala-doc.yml
+++ b/.github/workflows/publish-scala-doc.yml
@@ -39,7 +39,7 @@ jobs:
       needs-scala-doc: ${{ steps.filter.outputs.scala-docs }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: dorny/paths-filter@v3
         id: filter
         with:
@@ -54,7 +54,7 @@ jobs:
     if: needs.change-filters.outputs.needs-scala-doc == 'true'
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: ./.github/actions/repo-setup
       - uses: ./.github/actions/build-scala-doc
       - name: "Push ScalaDoc to remote"
diff --git a/.github/workflows/release-notes.yml b/.github/workflows/release-notes.yml
index 567f32dd..189636e5 100644
--- a/.github/workflows/release-notes.yml
+++ b/.github/workflows/release-notes.yml
@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
       - name: Build Release Notes
         id: release-notes
         uses: mikepenz/release-changelog-builder-action@v5