diff --git a/.github/workflows/compat-floor.yml b/.github/workflows/compat-floor.yml
index 2046f44..c157551 100644
--- a/.github/workflows/compat-floor.yml
+++ b/.github/workflows/compat-floor.yml
@@ -65,7 +65,7 @@ jobs:
           sudo docker image prune --all --force 2>/dev/null || true
 
       - name: Checkout repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Cache Library
         uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
diff --git a/.github/workflows/min-api-lint.yml b/.github/workflows/min-api-lint.yml
index 4b028e9..eeba5d5 100644
--- a/.github/workflows/min-api-lint.yml
+++ b/.github/workflows/min-api-lint.yml
@@ -28,7 +28,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Scan for unguarded post-2021.3 APIs
         run: |
diff --git a/.github/workflows/publish-upm.yml b/.github/workflows/publish-upm.yml
index 8039d01..30e9899 100644
--- a/.github/workflows/publish-upm.yml
+++ b/.github/workflows/publish-upm.yml
@@ -34,7 +34,7 @@ jobs:
       code-changed: ${{ steps.filter.outputs.code }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Detect code changes
         id: filter
@@ -73,7 +73,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Validate manifest & structure
         run: |
@@ -139,7 +139,7 @@ jobs:
           sudo docker image prune --all --force 2>/dev/null || true
 
       - name: Checkout repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Cache Library
         uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
@@ -187,7 +187,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
           token: ${{ secrets.GITHUB_TOKEN }}
@@ -526,7 +526,7 @@ jobs:
 
       - name: Create GitHub Release
         if: steps.release.outputs.skip != 'true'
-        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3
+        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3
         with:
           tag_name: v${{ steps.release.outputs.version }}
           name: v${{ steps.release.outputs.version }}
diff --git a/.github/workflows/webgl-pages.yml b/.github/workflows/webgl-pages.yml
index a60eadb..186445f 100644
--- a/.github/workflows/webgl-pages.yml
+++ b/.github/workflows/webgl-pages.yml
@@ -38,7 +38,7 @@ jobs:
           df -h /
 
       - name: Checkout repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Validate Unity activation configuration
         env: