diff --git a/.github/workflows/check-consistent-dependencies.yml b/.github/workflows/check-consistent-dependencies.yml
index a84ef40bbcab..89210e854f07 100644
--- a/.github/workflows/check-consistent-dependencies.yml
+++ b/.github/workflows/check-consistent-dependencies.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       # Always checkout the code because we don't always have a PR url.
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       # Only run remaining steps if there are changes to requirements/**
       # We do this instead of using path based short-circuiting.
diff --git a/.github/workflows/check-for-tutorial-prs.yml b/.github/workflows/check-for-tutorial-prs.yml
index 774430df4264..207989b15338 100644
--- a/.github/workflows/check-for-tutorial-prs.yml
+++ b/.github/workflows/check-for-tutorial-prs.yml
@@ -23,7 +23,7 @@ jobs:
     name: provide helpful bot comment
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Comment PR
         uses: thollander/actions-comment-pull-request@v3
diff --git a/.github/workflows/check_python_dependencies.yml b/.github/workflows/check_python_dependencies.yml
index 14d2d6252006..664d50f0e545 100644
--- a/.github/workflows/check_python_dependencies.yml
+++ b/.github/workflows/check_python_dependencies.yml
@@ -14,7 +14,7 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Python
         uses: actions/setup-python@v6
diff --git a/.github/workflows/ci-static-analysis.yml b/.github/workflows/ci-static-analysis.yml
index 94fb9e863d87..b4673e868e34 100644
--- a/.github/workflows/ci-static-analysis.yml
+++ b/.github/workflows/ci-static-analysis.yml
@@ -15,7 +15,7 @@ jobs:
         os: ["ubuntu-24.04"]
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Set up Python
         uses: actions/setup-python@v6
         with:
diff --git a/.github/workflows/compile-python-requirements.yml b/.github/workflows/compile-python-requirements.yml
index fe8fdc6ff542..c9ce6a808bed 100644
--- a/.github/workflows/compile-python-requirements.yml
+++ b/.github/workflows/compile-python-requirements.yml
@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Check out target branch
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: "${{ inputs.branch }}"
 
diff --git a/.github/workflows/js-tests.yml b/.github/workflows/js-tests.yml
index dd21d12e3d25..dbee521f15db 100644
--- a/.github/workflows/js-tests.yml
+++ b/.github/workflows/js-tests.yml
@@ -19,7 +19,7 @@ jobs:
           - "3.12"
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Fetch master to compare coverage
         run: git fetch --depth=1 origin master
 
diff --git a/.github/workflows/lint-imports.yml b/.github/workflows/lint-imports.yml
index 8b119d31e6b5..4d9abdd47ef3 100644
--- a/.github/workflows/lint-imports.yml
+++ b/.github/workflows/lint-imports.yml
@@ -14,7 +14,7 @@ jobs:
 
     steps:
       - name: Check out branch
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Python
         uses: actions/setup-python@v6
diff --git a/.github/workflows/migrations-check.yml b/.github/workflows/migrations-check.yml
index 20540fb43906..ff70d0eba404 100644
--- a/.github/workflows/migrations-check.yml
+++ b/.github/workflows/migrations-check.yml
@@ -71,7 +71,7 @@ jobs:
           docker exec ${{ job.services.mongo.id }} mongosh --host 127.0.0.1 --username edxapp --password password --eval 'use edxapp; db.adminCommand("ping");' edxapp
 
       - name: Checkout repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Python ${{ matrix.python-version }}
         uses: actions/setup-python@v6
diff --git a/.github/workflows/pylint-checks.yml b/.github/workflows/pylint-checks.yml
index 91141c0c29ed..59c92a709126 100644
--- a/.github/workflows/pylint-checks.yml
+++ b/.github/workflows/pylint-checks.yml
@@ -32,7 +32,7 @@ jobs:
     name: pylint ${{ matrix.module-name }}
     steps:
       - name: Check out repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Install required system packages
         run: sudo apt-get update && sudo apt-get install libxmlsec1-dev
diff --git a/.github/workflows/quality-checks.yml b/.github/workflows/quality-checks.yml
index b57b713eb93a..a573f86faac2 100644
--- a/.github/workflows/quality-checks.yml
+++ b/.github/workflows/quality-checks.yml
@@ -20,7 +20,7 @@ jobs:
         node-version: [20]
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 2
 
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
index c201f30aa799..2a971adae360 100644
--- a/.github/workflows/semgrep.yml
+++ b/.github/workflows/semgrep.yml
@@ -23,7 +23,7 @@ jobs:
           - "3.12"
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 1
 
diff --git a/.github/workflows/static-assets-check.yml b/.github/workflows/static-assets-check.yml
index 41159e3526c5..a7b031a51ea6 100644
--- a/.github/workflows/static-assets-check.yml
+++ b/.github/workflows/static-assets-check.yml
@@ -36,7 +36,7 @@ jobs:
 
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Python ${{ matrix.python-version }}
         uses: actions/setup-python@v6
diff --git a/.github/workflows/unit-tests.yml b/.github/workflows/unit-tests.yml
index 777af3491eb6..fc037d6ae0b6 100644
--- a/.github/workflows/unit-tests.yml
+++ b/.github/workflows/unit-tests.yml
@@ -67,7 +67,7 @@ jobs:
         #    os-version: "ubuntu-24.04"
     steps:
       - name: checkout repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: install system requirements
         run: |
@@ -162,7 +162,7 @@ jobs:
   collect-and-verify:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Setup Python
         uses: actions/setup-python@v6
         with:
@@ -238,7 +238,7 @@ jobs:
     runs-on: ubuntu-24.04
     needs: [run-tests]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: collect pytest warnings files
         uses: actions/download-artifact@v8
         with:
@@ -291,7 +291,7 @@ jobs:
           - 3.12
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Python ${{ matrix.python-version }}
         uses: actions/setup-python@v6
diff --git a/.github/workflows/units-test-scripts-structures-pruning.yml b/.github/workflows/units-test-scripts-structures-pruning.yml
index 8e003ac41018..57efd31db9e4 100644
--- a/.github/workflows/units-test-scripts-structures-pruning.yml
+++ b/.github/workflows/units-test-scripts-structures-pruning.yml
@@ -18,7 +18,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Python
         uses: actions/setup-python@v6
diff --git a/.github/workflows/units-test-scripts-user-retirement.yml b/.github/workflows/units-test-scripts-user-retirement.yml
index 554f6655014d..bb5319321fe5 100644
--- a/.github/workflows/units-test-scripts-user-retirement.yml
+++ b/.github/workflows/units-test-scripts-user-retirement.yml
@@ -18,7 +18,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Python
         uses: actions/setup-python@v6
diff --git a/.github/workflows/update-geolite-database.yml b/.github/workflows/update-geolite-database.yml
index 6b57501e398f..1aedef56a60a 100644
--- a/.github/workflows/update-geolite-database.yml
+++ b/.github/workflows/update-geolite-database.yml
@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Download GeoLite tar file
         run: |
diff --git a/.github/workflows/upgrade-one-python-dependency.yml b/.github/workflows/upgrade-one-python-dependency.yml
index fc4610baf49d..d0d55808a82f 100644
--- a/.github/workflows/upgrade-one-python-dependency.yml
+++ b/.github/workflows/upgrade-one-python-dependency.yml
@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: Check out target branch
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: "${{ inputs.branch }}"
 
diff --git a/.github/workflows/verify-dunder-init.yml b/.github/workflows/verify-dunder-init.yml
index ea03b1be2ea6..f9ea7c1a508c 100644
--- a/.github/workflows/verify-dunder-init.yml
+++ b/.github/workflows/verify-dunder-init.yml
@@ -14,7 +14,7 @@ jobs:
 
     steps:
       - name: Check out branch
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Ensure git is installed
         run: |