diff --git a/.github/workflows/bcr-compatibility.yml b/.github/workflows/bcr-compatibility.yml
index a312f019..5a735abc 100644
--- a/.github/workflows/bcr-compatibility.yml
+++ b/.github/workflows/bcr-compatibility.yml
@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           submodules: false
 
@@ -137,7 +137,7 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           submodules: false
 
@@ -211,7 +211,7 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           submodules: false
 
@@ -252,7 +252,7 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           submodules: false
 
@@ -297,7 +297,7 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           submodules: false
 
@@ -359,7 +359,7 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           submodules: false
 
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5e4e478b..09c82d77 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install Bazelisk
         run: |
@@ -44,7 +44,7 @@ jobs:
     needs: lint
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install Bazelisk
         run: |
@@ -98,7 +98,7 @@ jobs:
           --health-retries 5
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           submodules: false
 
@@ -202,7 +202,7 @@ jobs:
     needs: [lint, hermiticity-check]
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           submodules: false
 
@@ -312,7 +312,7 @@ jobs:
     continue-on-error: true
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           submodules: false
 
@@ -367,7 +367,7 @@ jobs:
     needs: [lint, hermiticity-check]
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           submodules: false
 
@@ -448,7 +448,7 @@ jobs:
     needs: [test-linux, test-macos]
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           submodules: false
 
@@ -541,7 +541,7 @@ jobs:
     if: github.ref == 'refs/heads/main'
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           submodules: false
diff --git a/.github/workflows/docs-deploy.yml b/.github/workflows/docs-deploy.yml
index 4a436f39..df93c33d 100644
--- a/.github/workflows/docs-deploy.yml
+++ b/.github/workflows/docs-deploy.yml
@@ -28,7 +28,7 @@ jobs:
       CLOUDFLARE_TOKEN: ${{ secrets.CLOUDFLARE_TOKEN }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Bazel
         uses: bazel-contrib/setup-bazel@0.19.0
diff --git a/.github/workflows/integration-examples.yml b/.github/workflows/integration-examples.yml
index e4993bd8..bf06eda6 100644
--- a/.github/workflows/integration-examples.yml
+++ b/.github/workflows/integration-examples.yml
@@ -104,7 +104,7 @@ jobs:
 
     steps:
       - name: Checkout rules_wasm_component (this PR)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           path: rules_wasm_component
 
@@ -141,7 +141,7 @@ jobs:
           echo "══════════════════════════════════════════════════════════"
 
       - name: Checkout examples repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: pulseengine/wasm-component-examples
           ref: ${{ steps.examples-branch.outputs.branch }}
diff --git a/.github/workflows/nix.yml b/.github/workflows/nix.yml
index 9694e770..cc16d3a6 100644
--- a/.github/workflows/nix.yml
+++ b/.github/workflows/nix.yml
@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Install Nix
         uses: cachix/install-nix-action@v31
diff --git a/.github/workflows/production-readiness.yml b/.github/workflows/production-readiness.yml
index 9c038809..2cd4293d 100644
--- a/.github/workflows/production-readiness.yml
+++ b/.github/workflows/production-readiness.yml
@@ -19,7 +19,7 @@ jobs:
         os: [ubuntu-latest, macos-latest]
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Setup Bazel
         uses: bazel-contrib/setup-bazel@0.19.0
@@ -44,7 +44,7 @@ jobs:
     runs-on: [self-hosted, linux, x64, light]
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Check for placeholder checksums
         run: |
@@ -77,7 +77,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Setup Bazel
         uses: bazel-contrib/setup-bazel@0.19.0
@@ -123,7 +123,7 @@ jobs:
         os: [ubuntu-22.04, macos-15-intel]
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Setup Bazel
         uses: bazel-contrib/setup-bazel@0.19.0
diff --git a/.github/workflows/weekly-checksum-update.yml b/.github/workflows/weekly-checksum-update.yml
index 5c2f2620..ffc6f9e3 100644
--- a/.github/workflows/weekly-checksum-update.yml
+++ b/.github/workflows/weekly-checksum-update.yml
@@ -40,7 +40,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           fetch-depth: 0