diff --git a/.github/workflows/audit-archive.yml b/.github/workflows/audit-archive.yml
index 2b8c3116..744e430e 100644
--- a/.github/workflows/audit-archive.yml
+++ b/.github/workflows/audit-archive.yml
@@ -96,7 +96,7 @@ jobs:
           fi
       - name: Record absolute job deadline origin
         run: echo "CHEATCODE_AUDIT_ARCHIVE_JOB_STARTED_AT_MS=$(date +%s%3N)" >> "$GITHUB_ENV"
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           ref: ${{ github.sha }}
       - uses: ./.github/actions/setup-repository
diff --git a/.github/workflows/build-snapshot.yml b/.github/workflows/build-snapshot.yml
index 580543ae..1e68543c 100644
--- a/.github/workflows/build-snapshot.yml
+++ b/.github/workflows/build-snapshot.yml
@@ -38,7 +38,7 @@ jobs:
             echo "Confirmation must exactly match BUILD_SNAPSHOT." >&2
             exit 1
           fi
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           ref: ${{ github.sha }}
       - uses: aquasecurity/setup-trivy@81e514348e19b6112ce2a7e3ecbafe19c1e1f567 # v0.3.1
diff --git a/.github/workflows/static-checks.yml b/.github/workflows/static-checks.yml
index 9fcd557b..76a27eff 100644
--- a/.github/workflows/static-checks.yml
+++ b/.github/workflows/static-checks.yml
@@ -17,11 +17,11 @@ jobs:
     runs-on: ubuntu-24.04
     timeout-minutes: 45
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
       - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
-      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 22.22.2
           cache: pnpm