diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f1c91b3..f66631a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ${{ fromJSON(vars.PRIMARY_LINUX_RUNNER_LABELS_JSON || '["ubuntu-latest"]') }}
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -39,7 +39,7 @@ jobs:
     env:
       GF_BAZEL_CONFIG: ${{ (contains(vars.BAZEL_LINUX_RUNNER_LABELS_JSON || vars.PRIMARY_LINUX_RUNNER_LABELS_JSON || '', 'glorious-flywheel') || contains(vars.BAZEL_LINUX_RUNNER_LABELS_JSON || vars.PRIMARY_LINUX_RUNNER_LABELS_JSON || '', 'jesssullivan-nix') || contains(vars.BAZEL_LINUX_RUNNER_LABELS_JSON || vars.PRIMARY_LINUX_RUNNER_LABELS_JSON || '', 'tinyland-nix')) && 'flywheel' || '' }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: tinyland-inc/GloriousFlywheel/.github/actions/nix-job@main
         with:
@@ -58,7 +58,7 @@ jobs:
     env:
       GF_BAZEL_CONFIG: ${{ (contains(vars.BAZEL_LINUX_RUNNER_LABELS_JSON || vars.PRIMARY_LINUX_RUNNER_LABELS_JSON || '', 'glorious-flywheel') || contains(vars.BAZEL_LINUX_RUNNER_LABELS_JSON || vars.PRIMARY_LINUX_RUNNER_LABELS_JSON || '', 'jesssullivan-nix') || contains(vars.BAZEL_LINUX_RUNNER_LABELS_JSON || vars.PRIMARY_LINUX_RUNNER_LABELS_JSON || '', 'tinyland-nix')) && 'flywheel' || '' }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: tinyland-inc/GloriousFlywheel/.github/actions/nix-job@main
         with:
diff --git a/.github/workflows/container.yml b/.github/workflows/container.yml
index 29a4a9d..c11548d 100644
--- a/.github/workflows/container.yml
+++ b/.github/workflows/container.yml
@@ -51,7 +51,7 @@ jobs:
       id-token: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4
diff --git a/.github/workflows/gitops-drift.yml b/.github/workflows/gitops-drift.yml
index c451062..a757650 100644
--- a/.github/workflows/gitops-drift.yml
+++ b/.github/workflows/gitops-drift.yml
@@ -28,7 +28,7 @@ jobs:
       label_list: ${{ steps.preflight.outputs.label_list }}
       reason: ${{ steps.preflight.outputs.reason }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - id: preflight
         name: Check cluster runner route
@@ -80,7 +80,7 @@ jobs:
       - name: Reclaim stale runner workspace
         run: find "$GITHUB_WORKSPACE" -maxdepth 1 -mindepth 1 -type d -name 'repo-*' ! -name "$CHECKOUT_PATH" -exec rm -rf {} +
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           path: ${{ env.CHECKOUT_PATH }}
 
diff --git a/.github/workflows/staging-deploy.yml b/.github/workflows/staging-deploy.yml
index 7d76ed4..ecca747 100644
--- a/.github/workflows/staging-deploy.yml
+++ b/.github/workflows/staging-deploy.yml
@@ -44,7 +44,7 @@ jobs:
       label_list: ${{ steps.preflight.outputs.label_list }}
       reason: ${{ steps.preflight.outputs.reason }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event_name == 'workflow_run' && github.event.workflow_run.head_sha || github.sha }}
 
@@ -91,7 +91,7 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.event_name == 'workflow_run' && github.event.workflow_run.head_sha || github.sha }}
 
diff --git a/.github/workflows/tofu-apply.yml b/.github/workflows/tofu-apply.yml
index 6b5b4fb..4627eae 100644
--- a/.github/workflows/tofu-apply.yml
+++ b/.github/workflows/tofu-apply.yml
@@ -39,7 +39,7 @@ jobs:
       label_list: ${{ steps.preflight.outputs.label_list }}
       reason: ${{ steps.preflight.outputs.reason }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - id: preflight
         name: Check RustFS/backend runner route
@@ -87,7 +87,7 @@ jobs:
       - name: Reclaim stale runner workspace
         run: find "$GITHUB_WORKSPACE" -maxdepth 1 -mindepth 1 -type d -name 'repo-*' ! -name "$CHECKOUT_PATH" -exec rm -rf {} +
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           path: ${{ env.CHECKOUT_PATH }}
 
diff --git a/.github/workflows/tofu-plan.yml b/.github/workflows/tofu-plan.yml
index 31dabbb..f8c10ef 100644
--- a/.github/workflows/tofu-plan.yml
+++ b/.github/workflows/tofu-plan.yml
@@ -42,7 +42,7 @@ jobs:
       label_list: ${{ steps.preflight.outputs.label_list }}
       reason: ${{ steps.preflight.outputs.reason }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - id: preflight
         name: Check RustFS/backend runner route
@@ -99,7 +99,7 @@ jobs:
       - name: Reclaim stale runner workspace
         run: find "$GITHUB_WORKSPACE" -maxdepth 1 -mindepth 1 -type d -name 'repo-*' ! -name "$CHECKOUT_PATH" -exec rm -rf {} +
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           path: ${{ env.CHECKOUT_PATH }}