diff --git a/.github/workflows/android.yaml b/.github/workflows/android.yaml
index 362a3b03..3e28556c 100644
--- a/.github/workflows/android.yaml
+++ b/.github/workflows/android.yaml
@@ -17,7 +17,7 @@ jobs:
         api-level: [28, 35]
     steps:
     - name: Checkout sources
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
     - name: Setup Java
       uses: actions/setup-java@v5
       with:
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 321a5793..cab42670 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -27,16 +27,16 @@ jobs:
           version: 17
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Checkout testsuite
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: WebAssembly/testsuite
           path: testsuite
           # The ref needs to stay in sync with the default value in test-gen-plugin
           ref: 88e97b0f742f4c3ee01fea683da130f344dd7b02
       - name: Checkout wasi-testsuite
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: WebAssembly/wasi-testsuite
           path: wasi-testsuite
@@ -57,7 +57,7 @@ jobs:
     name: CI - Docs
     steps:
       - name: checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Set up Java
         uses: actions/setup-java@v5
         with:
@@ -90,16 +90,16 @@ jobs:
         folder: [runtime-tests, compiler-tests, wasi-tests]
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Checkout testsuite
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: WebAssembly/testsuite
           path: testsuite
           # The ref needs to stay in sync with the default value in test-gen-plugin
           ref: 88e97b0f742f4c3ee01fea683da130f344dd7b02
       - name: Checkout wasi-testsuite
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: WebAssembly/wasi-testsuite
           path: wasi-testsuite
@@ -173,7 +173,7 @@ jobs:
           path: badge-${{ env.BADGE_NAME }}.svg
       - name: Checkout badges branch
         if: steps.publish.outputs.badge
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: badges
           path: badges
diff --git a/.github/workflows/dependency-check.yaml b/.github/workflows/dependency-check.yaml
index 3ee5e145..4c66111c 100644
--- a/.github/workflows/dependency-check.yaml
+++ b/.github/workflows/dependency-check.yaml
@@ -15,7 +15,7 @@ jobs:
     if: github.repository_owner == 'bytecodealliance'
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Set up Java
         uses: actions/setup-java@v5
         with:
diff --git a/.github/workflows/deploy-docs.yml b/.github/workflows/deploy-docs.yml
index dcae4b03..4a21d642 100644
--- a/.github/workflows/deploy-docs.yml
+++ b/.github/workflows/deploy-docs.yml
@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Java
         uses: actions/setup-java@v5
diff --git a/.github/workflows/nightly.yaml b/.github/workflows/nightly.yaml
index c45c9a19..8f0ee6b5 100644
--- a/.github/workflows/nightly.yaml
+++ b/.github/workflows/nightly.yaml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Set up Java
         uses: actions/setup-java@v5
         with:
diff --git a/.github/workflows/perf.yaml b/.github/workflows/perf.yaml
index 91700370..3f25bcf1 100644
--- a/.github/workflows/perf.yaml
+++ b/.github/workflows/perf.yaml
@@ -17,7 +17,7 @@ jobs:
       result-link: "https://nightly.link/bytecodealliance/endive/actions/artifacts/${{ steps.artifact-upload-step.outputs.artifact-id }}.zip"
     steps:
       - name: Checkout sources for this branch
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: main
       - name: Set up Java
@@ -44,7 +44,7 @@ jobs:
       result-link: "https://nightly.link/bytecodealliance/endive/actions/artifacts/${{ steps.artifact-upload-step.outputs.artifact-id }}.zip"
     steps:
       - name: Checkout sources for this branch
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Set up Java
         uses: actions/setup-java@v5
         with:
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 93c8bd1f..8a9f9102 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Java
         uses: actions/setup-java@v5
diff --git a/.github/workflows/zig-testsuite.yaml b/.github/workflows/zig-testsuite.yaml
index 5a3df406..4216b341 100644
--- a/.github/workflows/zig-testsuite.yaml
+++ b/.github/workflows/zig-testsuite.yaml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Set up Java
         uses: actions/setup-java@v5
         with: