diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 16296a1..d58ab06 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,7 +18,7 @@ jobs:
     name: Lint workflows
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install actionlint
         run: |
@@ -63,7 +63,7 @@ jobs:
           - hotfix-branch
           - release-branch
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/common-build-docs.yml b/.github/workflows/common-build-docs.yml
index 86f195c..bcae793 100644
--- a/.github/workflows/common-build-docs.yml
+++ b/.github/workflows/common-build-docs.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - name: Install Node.js
diff --git a/.github/workflows/common-publish-to-docker.yml b/.github/workflows/common-publish-to-docker.yml
index e11d231..5a9e4d0 100644
--- a/.github/workflows/common-publish-to-docker.yml
+++ b/.github/workflows/common-publish-to-docker.yml
@@ -30,7 +30,7 @@ jobs:
       packages: write
       id-token: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Docker metadata
         id: meta
diff --git a/.github/workflows/common-publish-to-github-pages.yml b/.github/workflows/common-publish-to-github-pages.yml
index fb635fa..15726e6 100644
--- a/.github/workflows/common-publish-to-github-pages.yml
+++ b/.github/workflows/common-publish-to-github-pages.yml
@@ -29,7 +29,7 @@ jobs:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: actions/configure-pages@v6
 
diff --git a/.github/workflows/common-release-preview.yml b/.github/workflows/common-release-preview.yml
index 034b49d..9430cba 100644
--- a/.github/workflows/common-release-preview.yml
+++ b/.github/workflows/common-release-preview.yml
@@ -28,7 +28,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           fetch-tags: true
diff --git a/.github/workflows/common-release.yml b/.github/workflows/common-release.yml
index 6a546a8..49f29f5 100644
--- a/.github/workflows/common-release.yml
+++ b/.github/workflows/common-release.yml
@@ -28,7 +28,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           fetch-tags: true
diff --git a/.github/workflows/common-validate-openspec.yml b/.github/workflows/common-validate-openspec.yml
index fa4add4..5a32bcb 100644
--- a/.github/workflows/common-validate-openspec.yml
+++ b/.github/workflows/common-validate-openspec.yml
@@ -25,7 +25,7 @@ jobs:
       run:
         working-directory: ${{ inputs.working-directory }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-node@v6
         with:
diff --git a/.github/workflows/common-validate-renovate.yml b/.github/workflows/common-validate-renovate.yml
index 005dbc2..cc5f2a7 100644
--- a/.github/workflows/common-validate-renovate.yml
+++ b/.github/workflows/common-validate-renovate.yml
@@ -17,7 +17,7 @@ jobs:
     name: Validate Renovate config
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Validate ${{ inputs.config-path }}
         run: |
diff --git a/.github/workflows/java-build-gradle.yml b/.github/workflows/java-build-gradle.yml
index c32722a..405f00e 100644
--- a/.github/workflows/java-build-gradle.yml
+++ b/.github/workflows/java-build-gradle.yml
@@ -21,7 +21,7 @@ jobs:
       run:
         working-directory: ${{ inputs.working-directory }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/java-build-maven.yml b/.github/workflows/java-build-maven.yml
index c6f557d..52b1381 100644
--- a/.github/workflows/java-build-maven.yml
+++ b/.github/workflows/java-build-maven.yml
@@ -21,7 +21,7 @@ jobs:
       run:
         working-directory: ${{ inputs.working-directory }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/java-lint.yml b/.github/workflows/java-lint.yml
index 6563a75..8da8ec7 100644
--- a/.github/workflows/java-lint.yml
+++ b/.github/workflows/java-lint.yml
@@ -13,7 +13,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-java@v5
         with:
diff --git a/.github/workflows/java-publish-to-gradle.yml b/.github/workflows/java-publish-to-gradle.yml
index 2f9ad77..315c901 100644
--- a/.github/workflows/java-publish-to-gradle.yml
+++ b/.github/workflows/java-publish-to-gradle.yml
@@ -43,7 +43,7 @@ jobs:
       run:
         working-directory: ${{ inputs.working-directory }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Set up Java
         uses: actions/setup-java@v5
diff --git a/.github/workflows/java-publish-to-maven.yml b/.github/workflows/java-publish-to-maven.yml
index 75b962e..1184d58 100644
--- a/.github/workflows/java-publish-to-maven.yml
+++ b/.github/workflows/java-publish-to-maven.yml
@@ -38,7 +38,7 @@ jobs:
       contents: read
       packages: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Set up Java (dry-run)
         if: ${{ inputs.dry-run }}
diff --git a/.github/workflows/python-build-hatch.yml b/.github/workflows/python-build-hatch.yml
index e77d630..9cb149e 100644
--- a/.github/workflows/python-build-hatch.yml
+++ b/.github/workflows/python-build-hatch.yml
@@ -26,7 +26,7 @@ jobs:
       run:
         working-directory: ${{ inputs.working-directory }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/python-build-poetry.yml b/.github/workflows/python-build-poetry.yml
index 042531e..174e555 100644
--- a/.github/workflows/python-build-poetry.yml
+++ b/.github/workflows/python-build-poetry.yml
@@ -36,7 +36,7 @@ jobs:
       run:
         working-directory: ${{ inputs.working-directory }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/python-lint.yml b/.github/workflows/python-lint.yml
index 8ff4be5..40b91a3 100644
--- a/.github/workflows/python-lint.yml
+++ b/.github/workflows/python-lint.yml
@@ -23,7 +23,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-python@v6
         with:
diff --git a/.github/workflows/typescript-build.yml b/.github/workflows/typescript-build.yml
index 7eac074..a9ff2fa 100644
--- a/.github/workflows/typescript-build.yml
+++ b/.github/workflows/typescript-build.yml
@@ -38,7 +38,7 @@ jobs:
       run:
         working-directory: ${{ inputs.working-directory }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           fetch-tags: true
diff --git a/.github/workflows/typescript-lint.yml b/.github/workflows/typescript-lint.yml
index 52f51c6..24b86fd 100644
--- a/.github/workflows/typescript-lint.yml
+++ b/.github/workflows/typescript-lint.yml
@@ -13,7 +13,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-node@v6
         with:
diff --git a/.github/workflows/typescript-publish-to-npm.yml b/.github/workflows/typescript-publish-to-npm.yml
index 22822ef..e802844 100644
--- a/.github/workflows/typescript-publish-to-npm.yml
+++ b/.github/workflows/typescript-publish-to-npm.yml
@@ -33,7 +33,7 @@ jobs:
       run:
         working-directory: ${{ inputs.working-directory }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-node@v6
         with:
diff --git a/.github/workflows/typescript-publish-to-vscode.yml b/.github/workflows/typescript-publish-to-vscode.yml
index 652ab65..38d786c 100644
--- a/.github/workflows/typescript-publish-to-vscode.yml
+++ b/.github/workflows/typescript-publish-to-vscode.yml
@@ -35,7 +35,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-tags: true
           fetch-depth: 0