diff --git a/.github/workflows/sd.yml b/.github/workflows/sd.yml
index ea6b0a65dd32..e9b4f228f07c 100644
--- a/.github/workflows/sd.yml
+++ b/.github/workflows/sd.yml
@@ -159,7 +159,7 @@ jobs:
       #   Both llvm-project sources and AOSP toolchain/llvm_android scripts
       #   live in this single repo.  A shallow clone is sufficient.
       - name: Checkout merged AOSP + LLVM repo
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 1
           submodules:  recursive
diff --git a/.github/workflows/sync.yml b/.github/workflows/sync.yml
index 7f8b87757465..e7e9c9d22a53 100644
--- a/.github/workflows/sync.yml
+++ b/.github/workflows/sync.yml
@@ -11,7 +11,7 @@ jobs:
 
     steps:
       - name: Checkout Hybrid Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0 # We need your local history to perform the merge