diff --git a/.github/workflows/deploy-frontend.yml b/.github/workflows/deploy-frontend.yml
index 94dfd0c61..846c2ff36 100644
--- a/.github/workflows/deploy-frontend.yml
+++ b/.github/workflows/deploy-frontend.yml
@@ -21,7 +21,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - uses: prefix-dev/setup-pixi@v0.9.3
         with:
diff --git a/.github/workflows/enforce-sha.yaml b/.github/workflows/enforce-sha.yaml
index 1e1c8d0c9..2d7cfea42 100644
--- a/.github/workflows/enforce-sha.yaml
+++ b/.github/workflows/enforce-sha.yaml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - name: Ensure SHA pinned actions
         uses: zgosalvez/github-actions-ensure-sha-pinned-actions@ca46236c6ce584ae24bc6283ba8dcf4b3ec8a066 # v5
         with:
diff --git a/.github/workflows/run_tests.yml b/.github/workflows/run_tests.yml
index fa1bb8067..1de53c025 100644
--- a/.github/workflows/run_tests.yml
+++ b/.github/workflows/run_tests.yml
@@ -9,7 +9,7 @@ jobs:
   run_tests:
     runs-on: ubuntu-latest
     steps:
-        - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
         - uses: prefix-dev/setup-pixi@v0.9.3
           with:
@@ -23,7 +23,7 @@ jobs:
   pre-commit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - name: Set up pixi
         uses: prefix-dev/setup-pixi@v0.9.3
         with:
diff --git a/.github/workflows/update_channel_v0_v1.yml b/.github/workflows/update_channel_v0_v1.yml
index c7b2488ba..3cb9193a0 100644
--- a/.github/workflows/update_channel_v0_v1.yml
+++ b/.github/workflows/update_channel_v0_v1.yml
@@ -50,7 +50,7 @@ jobs:
     outputs:
       string_list: ${{ steps.generate.outputs.string_list }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - uses: prefix-dev/setup-pixi@v0.9.3
 
       - name: Generate combination of missing subdirs and letters
@@ -86,7 +86,7 @@ jobs:
         subdirs: ${{fromJson(needs.generate_hash_letters.outputs.string_list)}}
 
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - uses: prefix-dev/setup-pixi@v0.9.3
 
       - name: Get partial index artifacts
@@ -115,7 +115,7 @@ jobs:
     needs: updater_of_records
     if: needs.updater_of_records.result == 'success'
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - uses: prefix-dev/setup-pixi@v0.9.3
 
       - name: Get partial index artifacts
@@ -141,7 +141,7 @@ jobs:
       always() &&
       (inputs.force_v1_generation == true || needs.updater_of_index.result == 'success')
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - uses: prefix-dev/setup-pixi@v0.9.3
 
       - name: Generate and upload v1 mappings (relations table + PyPI lookups)
@@ -168,7 +168,7 @@ jobs:
       (needs.update_v1_mappings.result == 'success' || needs.update_v1_mappings.result == 'skipped')
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - uses: prefix-dev/setup-pixi@v0.9.3
 
       - name: Update legacy mapping (if needed)