diff --git a/.github/workflows/base-checks.yaml b/.github/workflows/base-checks.yaml
index 200fa5bf9..ff50be6b1 100644
--- a/.github/workflows/base-checks.yaml
+++ b/.github/workflows/base-checks.yaml
@@ -16,7 +16,7 @@ jobs:
       matrix:
         job: [lint, typecheck, test, knip]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Read .nvmrc
         run: echo "NODE_VERSION=$(cat .nvmrc)" >> $GITHUB_OUTPUT
         id: nvm
diff --git a/.github/workflows/e2e.yaml b/.github/workflows/e2e.yaml
index 3038126b4..a21f24fb1 100644
--- a/.github/workflows/e2e.yaml
+++ b/.github/workflows/e2e.yaml
@@ -13,7 +13,7 @@ jobs:
         shardIndex: [1, 2, 3, 4]
         shardTotal: [4]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           # fetch all commits so we can find the branch
           fetch-depth: 0
diff --git a/.github/workflows/gitlab-mirror.yaml b/.github/workflows/gitlab-mirror.yaml
index dac48ff0c..72310fb72 100644
--- a/.github/workflows/gitlab-mirror.yaml
+++ b/.github/workflows/gitlab-mirror.yaml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - name: Logging
diff --git a/.github/workflows/manual-load-test.yaml b/.github/workflows/manual-load-test.yaml
index dd14c4c4d..82838288b 100644
--- a/.github/workflows/manual-load-test.yaml
+++ b/.github/workflows/manual-load-test.yaml
@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Testing GraphQL - Components
         if: always()
diff --git a/.github/workflows/performance-tests-pr.yaml b/.github/workflows/performance-tests-pr.yaml
index 54369dd42..83b736706 100644
--- a/.github/workflows/performance-tests-pr.yaml
+++ b/.github/workflows/performance-tests-pr.yaml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Send an HTTP request to start up the server
         run: |
           curl -s '${{ github.event.deployment_status.target_url }}/api/graphql' -X 'POST' -H 'Content-Type: application/json' -d '{"operationName":"DataCubeObservations","variables":{"locale":"en","sourceType":"sparql","sourceUrl":"https://lindas.admin.ch/query","cubeFilter":{"iri":"https://energy.ld.admin.ch/sfoe/bfe_ogd84_einmalverguetung_fuer_photovoltaikanlagen/10","filters":{"https://energy.ld.admin.ch/sfoe/bfe_ogd84_einmalverguetung_fuer_photovoltaikanlagen/Kanton":{"type":"single","value":"https://ld.admin.ch/canton/1"}}}},"query":"query DataCubeObservations($sourceType: String!, $sourceUrl: DataSourceUrl!, $locale: String!, $cubeFilter: DataCubeObservationFilter!) { dataCubeObservations(sourceType: $sourceType, sourceUrl: $sourceUrl, locale: $locale, cubeFilter: $cubeFilter) }"}' > /dev/null
diff --git a/.github/workflows/performance-tests.yaml b/.github/workflows/performance-tests.yaml
index 7a844dc59..8a3532727 100644
--- a/.github/workflows/performance-tests.yaml
+++ b/.github/workflows/performance-tests.yaml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Download, unzip and install k6 binary
         run: |
           wget https://github.com/grafana/k6/releases/download/v0.49.0/k6-v0.49.0-linux-amd64.tar.gz
diff --git a/.github/workflows/preload-varnish-cache.yaml b/.github/workflows/preload-varnish-cache.yaml
index e31b0e8e9..8831c1f98 100644
--- a/.github/workflows/preload-varnish-cache.yaml
+++ b/.github/workflows/preload-varnish-cache.yaml
@@ -9,7 +9,7 @@ jobs:
   preload-varnish-cache:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Read .nvmrc
         run: echo "NODE_VERSION=$(cat .nvmrc)" >> $GITHUB_OUTPUT
         id: nvm