diff --git a/.github/workflows/ci-linux.yml b/.github/workflows/ci-linux.yml
index 2bd08c452a..4bb8dcee05 100644
--- a/.github/workflows/ci-linux.yml
+++ b/.github/workflows/ci-linux.yml
@@ -83,7 +83,7 @@ jobs:
 
     steps:
       - name: Checkout repository from GitHub
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7
 
       - name: Build
         timeout-minutes: 15
diff --git a/.github/workflows/ci-linux_asan.yml b/.github/workflows/ci-linux_asan.yml
index 54dcd2dca6..b3868d583f 100644
--- a/.github/workflows/ci-linux_asan.yml
+++ b/.github/workflows/ci-linux_asan.yml
@@ -37,7 +37,7 @@ jobs:
 
     steps:
       - name: Checkout repository from GitHub
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7
 
       - name: Build
         timeout-minutes: 15
diff --git a/.github/workflows/ci-macos.yml b/.github/workflows/ci-macos.yml
index 2ab16012c2..e5ae99e212 100644
--- a/.github/workflows/ci-macos.yml
+++ b/.github/workflows/ci-macos.yml
@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: Checkout repository from GitHub
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7
 
       - name: Install packages
         if: matrix.features == 'huge'
diff --git a/.github/workflows/ci-windows.yml b/.github/workflows/ci-windows.yml
index 013d5142b1..583c2f237a 100644
--- a/.github/workflows/ci-windows.yml
+++ b/.github/workflows/ci-windows.yml
@@ -128,7 +128,7 @@ jobs:
           release: false
 
       - name: Checkout repository from GitHub
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7
 
       - name: Create a list of download URLs
         shell: cmd
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index e5c02fbb9a..330b3879ab 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -44,7 +44,7 @@ jobs:
 
     steps:
     - name: Checkout repository from github
-      uses: actions/checkout@v6.0.3
+      uses: actions/checkout@v7
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
diff --git a/.github/workflows/link-check.yml b/.github/workflows/link-check.yml
index da69554647..712832ee99 100644
--- a/.github/workflows/link-check.yml
+++ b/.github/workflows/link-check.yml
@@ -8,7 +8,7 @@ jobs:
   lychee:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7
       - name: Run Lychee
         uses: lycheeverse/lychee-action@v2
         with:
diff --git a/.github/workflows/macvim-buildtest.yaml b/.github/workflows/macvim-buildtest.yaml
index 26f62ae81c..45fb76924b 100644
--- a/.github/workflows/macvim-buildtest.yaml
+++ b/.github/workflows/macvim-buildtest.yaml
@@ -64,7 +64,7 @@ jobs:
     runs-on: ${{ inputs.os }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up legacy build
         if: inputs.legacy
@@ -135,7 +135,7 @@ jobs:
       # Note: Legacy self-hosted runner already has this installed and doesn't need this.
       - name: Cache Python 2
         if: inputs.publish && !inputs.legacy
-        uses: actions/cache@v5
+        uses: actions/cache@v5.0.5
         with:
           path: python27-cache
           key: ${{ inputs.os }}-python27