diff --git a/.github/workflows/lint-policy-in-other-repos.yml b/.github/workflows/lint-policy-in-other-repos.yml
index 2c5c71e..bbae5e0 100644
--- a/.github/workflows/lint-policy-in-other-repos.yml
+++ b/.github/workflows/lint-policy-in-other-repos.yml
@@ -16,21 +16,21 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout cfengine-cli
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           path: cfengine-cli
       - name: Checkout masterfiles
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           repository: cfengine/masterfiles
           path: masterfiles
       - name: Checkout documentation
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           repository: cfengine/documentation
           path: documentation
       - name: Checkout modules
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           repository: cfengine/modules
           path: modules
diff --git a/.github/workflows/make-check.yml b/.github/workflows/make-check.yml
index b59382e..b0d2181 100644
--- a/.github/workflows/make-check.yml
+++ b/.github/workflows/make-check.yml
@@ -25,7 +25,7 @@ jobs:
       matrix:
         python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Set up Python ${{ matrix.python-version }}
         uses: actions/setup-python@v5
         with:
diff --git a/.github/workflows/pypi-publish.yml b/.github/workflows/pypi-publish.yml
index 059a299..d29881d 100644
--- a/.github/workflows/pypi-publish.yml
+++ b/.github/workflows/pypi-publish.yml
@@ -9,7 +9,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v5
         with:
           python-version: "3.x"
@@ -30,7 +30,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - run: |
           git fetch --all --tags
           pip install uv
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index 47d5929..05d7dc5 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.0
       - name: Self-hosted Renovate
         uses: renovatebot/github-action@v46.1.19
         with:
diff --git a/.github/workflows/update-syntax-description.yml b/.github/workflows/update-syntax-description.yml
index e1f2dde..c427b22 100644
--- a/.github/workflows/update-syntax-description.yml
+++ b/.github/workflows/update-syntax-description.yml
@@ -21,7 +21,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Checks-out repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: "main"
       - name: Set up Python 3.12