diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 99718fa9..7dc88d83 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -47,7 +47,7 @@ jobs:
       pull-requests: read
     steps:
       - name: Check out the repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         #
       - name: Restore the build artefacts to be run
         uses: ./.github/actions/build-artefacts
diff --git a/.github/workflows/integrity.yml b/.github/workflows/integrity.yml
index ddc77f6b..47060fa5 100644
--- a/.github/workflows/integrity.yml
+++ b/.github/workflows/integrity.yml
@@ -48,7 +48,7 @@ jobs:
       contents: read
     steps:
       - name: Check out the repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         #
       - name: Build the project (Vite)
         uses: ./.github/actions/task
@@ -76,7 +76,7 @@ jobs:
       contents: read
     steps:
       - name: Check out the repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         #
       - name: Verify the workflow syntax (actionlint)
         uses: ./.github/actions/task
@@ -128,7 +128,7 @@ jobs:
       contents: read
     steps:
       - name: Check out the repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         #
       - name: Verify the unit tests (Vitest)
         uses: ./.github/actions/task
diff --git a/.github/workflows/publish-github.yml b/.github/workflows/publish-github.yml
index 17fc1032..35384c08 100644
--- a/.github/workflows/publish-github.yml
+++ b/.github/workflows/publish-github.yml
@@ -50,7 +50,7 @@ jobs:
       contents: read
     steps:
       - name: Check out the repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         #
       - name: Create a draft GitHub release
         uses: rainstormy/release/github@eb87dc4ba5e9e89451adce4a3c62538e5ecef809 # v1.1.1
diff --git a/.github/workflows/publish-tags.yml b/.github/workflows/publish-tags.yml
index 52b08df5..5d202e54 100644
--- a/.github/workflows/publish-tags.yml
+++ b/.github/workflows/publish-tags.yml
@@ -33,7 +33,7 @@ jobs:
     permissions: {}
     steps:
       - name: Check out the repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           # Use a separate access token to allow the push tag event in this workflow to trigger `.github/workflows/publish-github.yml`.
           # https://docs.github.com/en/actions/using-workflows/triggering-a-workflow#triggering-a-workflow-from-a-workflow
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 4e8e5a70..03574524 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -50,7 +50,7 @@ jobs:
     permissions: {}
     steps:
       - name: Check out the repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           # Use a separate access token with permission to commit and push.
           token: ${{ secrets.BOT_NIMBUS_GH_AUTH_TOKEN }}