diff --git a/.github/workflows/cpu-tests.yml b/.github/workflows/cpu-tests.yml
index 0455c32a..ef47c0ad 100644
--- a/.github/workflows/cpu-tests.yml
+++ b/.github/workflows/cpu-tests.yml
@@ -34,7 +34,7 @@ jobs:
         python-version: ["3.10", "3.11", "3.12"]
     steps:
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Set up Python
         uses: actions/setup-python@v6
diff --git a/.github/workflows/eval-reusable.yml b/.github/workflows/eval-reusable.yml
index 184bcf3b..03a819f2 100644
--- a/.github/workflows/eval-reusable.yml
+++ b/.github/workflows/eval-reusable.yml
@@ -55,7 +55,7 @@ jobs:
           fi
 
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           ref: ${{ inputs.ref || github.sha }}
 
diff --git a/.github/workflows/gemm-sweep-analysis.yml b/.github/workflows/gemm-sweep-analysis.yml
index 388a465e..2a8fd403 100644
--- a/.github/workflows/gemm-sweep-analysis.yml
+++ b/.github/workflows/gemm-sweep-analysis.yml
@@ -36,7 +36,7 @@ jobs:
 
     steps:
       - name: Checkout AORTA repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           repository: ROCm/aorta
           ref : prosenj_gh_action
@@ -167,7 +167,7 @@ jobs:
 
 
       - name: Checkout aorta-report repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           repository: ROCm/aorta-report
           ref: main
diff --git a/.github/workflows/gpu-tests.yml b/.github/workflows/gpu-tests.yml
index 0c0daf8c..da551aba 100644
--- a/.github/workflows/gpu-tests.yml
+++ b/.github/workflows/gpu-tests.yml
@@ -176,7 +176,7 @@ jobs:
           fi
 
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Set up ROCm CI container
         uses: ./.github/actions/rocm-ci-setup
@@ -263,7 +263,7 @@ jobs:
           fi
 
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Set up ROCm CI container
         uses: ./.github/actions/rocm-ci-setup
diff --git a/.github/workflows/lock-requirements.yml b/.github/workflows/lock-requirements.yml
index 1c3cf708..14902e5a 100644
--- a/.github/workflows/lock-requirements.yml
+++ b/.github/workflows/lock-requirements.yml
@@ -43,7 +43,7 @@ jobs:
           fi
 
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Set up ROCm CI container
         uses: ./.github/actions/rocm-ci-setup
diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index 07e6f127..289ffb3c 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -45,7 +45,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0  # full history + tags so setuptools_scm / bump_version see the latest release
 
diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index 1f8e11c8..bc5ff0c0 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -47,7 +47,7 @@ jobs:
       # Always deploy the landing page + dashboard generator from main, even for a
       # manual workflow_dispatch off another ref, so Pages content is deterministic.
       - name: Check out main
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           ref: main
 
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 986696bd..1604b348 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Set up Python
         uses: actions/setup-python@v6
diff --git a/.github/workflows/rccl-warp-speed-analysis.yml b/.github/workflows/rccl-warp-speed-analysis.yml
index f60ecc4c..fba5c740 100644
--- a/.github/workflows/rccl-warp-speed-analysis.yml
+++ b/.github/workflows/rccl-warp-speed-analysis.yml
@@ -45,7 +45,7 @@ jobs:
 
     steps:
       - name: Checkout AORTA repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           repository: ROCm/aorta
           ref: ${{ github.ref }}
@@ -356,7 +356,7 @@ jobs:
           path: results
 
       - name: Checkout aorta-report repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           repository: ROCm/aorta-report
           ref: main
diff --git a/.github/workflows/refresh-baselines.yml b/.github/workflows/refresh-baselines.yml
index 0170532f..6274819d 100644
--- a/.github/workflows/refresh-baselines.yml
+++ b/.github/workflows/refresh-baselines.yml
@@ -56,7 +56,7 @@ jobs:
           fi
 
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Set up ROCm CI container
         uses: ./.github/actions/rocm-ci-setup
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 43446297..4bedef70 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -47,7 +47,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0  # full history + tags so setuptools_scm can derive the version
 
diff --git a/.github/workflows/sanitizers-nightly.yml b/.github/workflows/sanitizers-nightly.yml
index a5c8bed8..1edc4291 100644
--- a/.github/workflows/sanitizers-nightly.yml
+++ b/.github/workflows/sanitizers-nightly.yml
@@ -31,7 +31,7 @@ jobs:
     timeout-minutes: 120
     steps:
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Set up Python
         uses: actions/setup-python@v6
@@ -124,7 +124,7 @@ jobs:
     permissions:
       contents: write   # push dashboard to the sanitizer-results branch
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - uses: actions/download-artifact@v4
         # A failed GPU job may leave no artifact at all; don't hard-fail the
         # publish job -- we still want to record the failure on the public page.