diff --git a/.changeset/dull-pumas-doubt.md b/.changeset/dull-pumas-doubt.md
new file mode 100644
index 000000000..b5ae23ff9
--- /dev/null
+++ b/.changeset/dull-pumas-doubt.md
@@ -0,0 +1,40 @@
+---
+"cicd-build-publish-artifacts-go": patch
+"cicd-build-publish-artifacts-ts": patch
+"beholder-pulumi-deploy-schema": patch
+"guard-from-missing-changesets": patch
+"parse-and-mask-test-secrets": patch
+"cicd-build-publish-charts": patch
+"llm-action-error-reporter": patch
+"chip-schema-registration": patch
+"crib-deploy-environment": patch
+"validate-protos-version": patch
+"ci-beholder-validator": patch
+"guard-tag-from-branch": patch
+"cleanup-old-branches": patch
+"ctf-build-test-image": patch
+"slack-notify-git-ref": patch
+"devenv-k8s-setup-ns": patch
+"md-confluence-sync": patch
+"pr-quality-check": patch
+"bump-mcms-tools": patch
+"ci-benchmarking": patch
+"ci-sonarqube-go": patch
+"ci-sonarqube-ts": patch
+"ctf-build-image": patch
+"ci-kubeconform": patch
+"ci-lint-charts": patch
+"setup-renovate": patch
+"update-actions": patch
+"llm-pr-writer": patch
+"ci-lint-misc": patch
+"setup-golang": patch
+"ci-prettier": patch
+"ci-test-sol": patch
+"ci-lint-go": patch
+"ci-lint-ts": patch
+"ci-test-go": patch
+"ci-test-ts": patch
+---
+
+chore: gha dependency bumps
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index fe912d587..d39d54e8e 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -16,7 +16,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Check if deny licenses are in sync
         id: check-sync
diff --git a/.github/workflows/pull-request-main.yml b/.github/workflows/pull-request-main.yml
index e9b6ee279..39f2f3bfd 100644
--- a/.github/workflows/pull-request-main.yml
+++ b/.github/workflows/pull-request-main.yml
@@ -15,7 +15,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
@@ -32,7 +32,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
@@ -49,7 +49,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
@@ -71,7 +71,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           # Commit back any changes based on the commit that triggered this action
           # rather than merge commit of main into the PR branch
@@ -101,7 +101,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
@@ -119,7 +119,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
@@ -136,7 +136,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
@@ -163,7 +163,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/push-main.yml b/.github/workflows/push-main.yml
index 6dfb97f12..eb5a49b1a 100644
--- a/.github/workflows/push-main.yml
+++ b/.github/workflows/push-main.yml
@@ -14,7 +14,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: ci-lint
         uses: ./actions/ci-lint-ts
@@ -29,7 +29,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
@@ -46,7 +46,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
@@ -68,7 +68,7 @@ jobs:
       actions: read
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
           persist-credentials: false
@@ -87,7 +87,7 @@ jobs:
       actions: read
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
           persist-credentials: false
diff --git a/.github/workflows/schedule-renovate.yml b/.github/workflows/schedule-renovate.yml
index 0d03a731a..2bfcf03dd 100644
--- a/.github/workflows/schedule-renovate.yml
+++ b/.github/workflows/schedule-renovate.yml
@@ -17,7 +17,7 @@ jobs:
       actions: read
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
           persist-credentials: false
diff --git a/.github/workflows/setup-postgres-validate.yml b/.github/workflows/setup-postgres-validate.yml
index 3e2c7bf90..c362d6555 100644
--- a/.github/workflows/setup-postgres-validate.yml
+++ b/.github/workflows/setup-postgres-validate.yml
@@ -31,7 +31,7 @@ jobs:
             want_shared_buffers: "128MB"
             want_fsync: "off"
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/solidity-review-artifacts.yml b/.github/workflows/solidity-review-artifacts.yml
index f3499786a..1365c3087 100644
--- a/.github/workflows/solidity-review-artifacts.yml
+++ b/.github/workflows/solidity-review-artifacts.yml
@@ -141,7 +141,7 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Checkout the caller repository
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v7.0.0
         with:
           fetch-depth: 0
           persist-credentials: false
@@ -207,7 +207,7 @@ jobs:
     needs: [gather-basic-info]
     steps:
       - name: Checkout the caller repository
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v7.0.0
         with:
           ref: ${{ env.head_ref }}
           persist-credentials: false
@@ -308,14 +308,14 @@ jobs:
       GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - name: Checkout caller repository
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v7.0.0
         with:
           fetch-depth: 0
           ref: ${{ env.head_ref }}
           persist-credentials: false
 
       - name: Checkout .github repository
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v7.0.0
         with:
           repository: smartcontractkit/.github
           ref: 65249c7eae628aad6e70a0c0850d981cd0074bf9
@@ -340,7 +340,7 @@ jobs:
 
       - name: Set up Python
         if: ${{ inputs.generate_slither_reports == true }}
-        uses: actions/setup-python@v5.6.0
+        uses: actions/setup-python@v6.3.0
         with:
           python-version: "3.8"
 
@@ -472,14 +472,14 @@ jobs:
 
       - name: Checkout caller repository
         if: ${{ inputs.link_with_jira == true }}
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v7.0.0
         with:
           ref: ${{ env.head_ref }}
           persist-credentials: false
 
       - name: Checkout chainlink-github-actions repository
         if: ${{ inputs.link_with_jira == true }}
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v7.0.0
         with:
           repository: smartcontractkit/.github
           ref: 65249c7eae628aad6e70a0c0850d981cd0074bf9
diff --git a/actions/beholder-pulumi-deploy-schema/action.yml b/actions/beholder-pulumi-deploy-schema/action.yml
index f1e96d013..c5a9582a4 100644
--- a/actions/beholder-pulumi-deploy-schema/action.yml
+++ b/actions/beholder-pulumi-deploy-schema/action.yml
@@ -24,7 +24,7 @@ inputs:
 runs:
   using: "composite"
   steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
 
     - name: Docker login to ECR
       shell: bash
diff --git a/actions/bump-mcms-tools/action.yml b/actions/bump-mcms-tools/action.yml
index 116e0316f..520c91e42 100644
--- a/actions/bump-mcms-tools/action.yml
+++ b/actions/bump-mcms-tools/action.yml
@@ -36,7 +36,7 @@ runs:
   using: "composite"
   steps:
     - name: Check out
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Resolve latest tag
       id: latest
diff --git a/actions/chip-schema-registration/action.yml b/actions/chip-schema-registration/action.yml
index d2c354630..273b9ec2d 100644
--- a/actions/chip-schema-registration/action.yml
+++ b/actions/chip-schema-registration/action.yml
@@ -44,7 +44,7 @@ inputs:
 runs:
   using: composite
   steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
 
     - name: Login to ECR
       uses: aws-actions/amazon-ecr-login@f2e9fc6c2b355c1890b65e6f6f0e2ac3e6e22f78 # v2.1.2
diff --git a/actions/ci-beholder-validator/action.yml b/actions/ci-beholder-validator/action.yml
index dc75a8008..f0a595f30 100644
--- a/actions/ci-beholder-validator/action.yml
+++ b/actions/ci-beholder-validator/action.yml
@@ -31,7 +31,7 @@ runs:
   using: composite
   steps:
     - name: Checkout repo
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/ci-benchmarking/action.yml b/actions/ci-benchmarking/action.yml
index de777b7f4..d50b0cc1c 100644
--- a/actions/ci-benchmarking/action.yml
+++ b/actions/ci-benchmarking/action.yml
@@ -53,10 +53,10 @@ runs:
   using: "composite"
   steps:
     - name: Checkout Code
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Setup Go Environment
-      uses: actions/setup-go@v6
+      uses: actions/setup-go@v7
       with:
         go-version: "stable"
 
diff --git a/actions/ci-kubeconform/action.yml b/actions/ci-kubeconform/action.yml
index 33c398303..75423a949 100644
--- a/actions/ci-kubeconform/action.yml
+++ b/actions/ci-kubeconform/action.yml
@@ -45,12 +45,12 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
     - name: Install Go
-      uses: actions/setup-go@v6
+      uses: actions/setup-go@v7
       with:
         go-version-file: ${{ inputs.go-version-file }}
 
diff --git a/actions/ci-lint-charts/action.yml b/actions/ci-lint-charts/action.yml
index 74a7c1082..ef8560168 100644
--- a/actions/ci-lint-charts/action.yml
+++ b/actions/ci-lint-charts/action.yml
@@ -30,7 +30,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/ci-lint-go/action.yml b/actions/ci-lint-go/action.yml
index cc8c077dd..690c33bdf 100644
--- a/actions/ci-lint-go/action.yml
+++ b/actions/ci-lint-go/action.yml
@@ -81,7 +81,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
@@ -103,7 +103,7 @@ runs:
         envFile: ${{ inputs.env-files }}
 
     - name: Setup go
-      uses: actions/setup-go@v6
+      uses: actions/setup-go@v7
       with:
         go-version-file: ${{ inputs.go-version-file }}
         cache: ${{ inputs.use-go-cache }}
diff --git a/actions/ci-lint-misc/action.yml b/actions/ci-lint-misc/action.yml
index f8fb288b7..951b19542 100644
--- a/actions/ci-lint-misc/action.yml
+++ b/actions/ci-lint-misc/action.yml
@@ -21,7 +21,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/ci-lint-ts/action.yml b/actions/ci-lint-ts/action.yml
index fa0f6b2f6..e6a0e3138 100644
--- a/actions/ci-lint-ts/action.yml
+++ b/actions/ci-lint-ts/action.yml
@@ -34,7 +34,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/ci-prettier/action.yml b/actions/ci-prettier/action.yml
index 0f84aacb1..e968b0fb4 100644
--- a/actions/ci-prettier/action.yml
+++ b/actions/ci-prettier/action.yml
@@ -36,7 +36,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/ci-sonarqube-go/action.yml b/actions/ci-sonarqube-go/action.yml
index cb3401f15..ad8d9d8f5 100644
--- a/actions/ci-sonarqube-go/action.yml
+++ b/actions/ci-sonarqube-go/action.yml
@@ -46,7 +46,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/ci-sonarqube-ts/action.yml b/actions/ci-sonarqube-ts/action.yml
index a862d7a66..7fa9e5302 100644
--- a/actions/ci-sonarqube-ts/action.yml
+++ b/actions/ci-sonarqube-ts/action.yml
@@ -54,7 +54,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/ci-test-go/action.yml b/actions/ci-test-go/action.yml
index abd63b413..af7c92f33 100644
--- a/actions/ci-test-go/action.yml
+++ b/actions/ci-test-go/action.yml
@@ -102,7 +102,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/ci-test-sol/action.yml b/actions/ci-test-sol/action.yml
index a78c81a25..1b849fb51 100644
--- a/actions/ci-test-sol/action.yml
+++ b/actions/ci-test-sol/action.yml
@@ -55,7 +55,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/ci-test-ts/action.yml b/actions/ci-test-ts/action.yml
index 51bf6b3ef..c6f77174b 100644
--- a/actions/ci-test-ts/action.yml
+++ b/actions/ci-test-ts/action.yml
@@ -34,7 +34,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/cicd-build-publish-artifacts-go/action.yml b/actions/cicd-build-publish-artifacts-go/action.yml
index 402c7b3b3..b6843fd1d 100644
--- a/actions/cicd-build-publish-artifacts-go/action.yml
+++ b/actions/cicd-build-publish-artifacts-go/action.yml
@@ -110,7 +110,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
         ref: ${{ inputs.checkout-ref }}
@@ -127,7 +127,7 @@ runs:
         set-git-config: "true"
 
     - name: Setup go
-      uses: actions/setup-go@v6
+      uses: actions/setup-go@v7
       with:
         go-version-file: ${{ inputs.go-version-file }}
         cache: ${{ inputs.use-go-cache }}
diff --git a/actions/cicd-build-publish-artifacts-ts/action.yml b/actions/cicd-build-publish-artifacts-ts/action.yml
index 502e07379..f7bc0d8c3 100644
--- a/actions/cicd-build-publish-artifacts-ts/action.yml
+++ b/actions/cicd-build-publish-artifacts-ts/action.yml
@@ -70,7 +70,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/cicd-build-publish-charts/action.yml b/actions/cicd-build-publish-charts/action.yml
index 1548381de..c1f08b7c8 100644
--- a/actions/cicd-build-publish-charts/action.yml
+++ b/actions/cicd-build-publish-charts/action.yml
@@ -48,7 +48,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/cleanup-old-branches/action.yml b/actions/cleanup-old-branches/action.yml
index b814eff35..b2e85a12a 100644
--- a/actions/cleanup-old-branches/action.yml
+++ b/actions/cleanup-old-branches/action.yml
@@ -42,7 +42,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/crib-deploy-environment/action.yml b/actions/crib-deploy-environment/action.yml
index 9b8ed9e1e..0ad4514bd 100644
--- a/actions/crib-deploy-environment/action.yml
+++ b/actions/crib-deploy-environment/action.yml
@@ -214,7 +214,7 @@ runs:
         websockets-services: ${{ env.WEBSOCKETS_SERVICES }}
 
     - name: Checkout crib repo
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         repository: "smartcontractkit/crib"
         ref: ${{ inputs.crib-repo-ref }}
@@ -238,7 +238,7 @@ runs:
       with:
         registries: ${{ inputs.aws-ecr-private-registry }}
 
-    - uses: actions/setup-go@v6
+    - uses: actions/setup-go@v7
       with:
         go-version-file: "${{ github.workspace }}/crib/cli/go.mod"
         cache-dependency-path: "${{ github.workspace }}/crib/**/*.sum"
diff --git a/actions/ctf-build-image/action.yml b/actions/ctf-build-image/action.yml
index 5edcc65f4..48e049868 100644
--- a/actions/ctf-build-image/action.yml
+++ b/actions/ctf-build-image/action.yml
@@ -156,7 +156,7 @@ runs:
 
     - name: Setup Go for dependency overrides
       if: inputs.go-get-overrides != ''
-      uses: actions/setup-go@v6
+      uses: actions/setup-go@v7
       with:
         go-version-file: go.mod
         cache: false
diff --git a/actions/ctf-build-test-image/action.yml b/actions/ctf-build-test-image/action.yml
index 0c8efeb4b..82fa97184 100644
--- a/actions/ctf-build-test-image/action.yml
+++ b/actions/ctf-build-test-image/action.yml
@@ -70,7 +70,7 @@ runs:
         echo "short_sha=${short_sha}" >> "$GITHUB_OUTPUT"
     - name: Checkout chainlink-testing-framework
       if: steps.version.outputs.is_semantic == 'false'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         repository: smartcontractkit/chainlink-testing-framework
         ref: main
diff --git a/actions/devenv-k8s-setup-ns/action.yml b/actions/devenv-k8s-setup-ns/action.yml
index 6090e376a..9fb0888a6 100644
--- a/actions/devenv-k8s-setup-ns/action.yml
+++ b/actions/devenv-k8s-setup-ns/action.yml
@@ -109,7 +109,7 @@ runs:
         echo "workflow-run-number=${WORKFLOW_RUN_NUMBER}" | tee -a "$GITHUB_OUTPUT"
 
     - name: Checkout devenv repo
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         repository: "smartcontractkit/devenv"
         ref: ${{ inputs.devenv-repo-ref }}
diff --git a/actions/guard-from-missing-changesets/action.yml b/actions/guard-from-missing-changesets/action.yml
index 6c554639a..e0186507e 100644
--- a/actions/guard-from-missing-changesets/action.yml
+++ b/actions/guard-from-missing-changesets/action.yml
@@ -21,7 +21,7 @@ runs:
   steps:
     - name: Checkout full repo
       if: inputs.checkout == 'true'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
     - name: Install changesets
       shell: bash
       run: ${{ github.action_path }}/scripts/install-changesets.sh
diff --git a/actions/guard-tag-from-branch/action.yml b/actions/guard-tag-from-branch/action.yml
index d4c5cf113..b5dd895f6 100644
--- a/actions/guard-tag-from-branch/action.yml
+++ b/actions/guard-tag-from-branch/action.yml
@@ -30,7 +30,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/llm-action-error-reporter/action.yml b/actions/llm-action-error-reporter/action.yml
index 8be5a0331..95677df7a 100644
--- a/actions/llm-action-error-reporter/action.yml
+++ b/actions/llm-action-error-reporter/action.yml
@@ -43,7 +43,7 @@ runs:
   using: "composite"
   steps:
     - name: Checkout calling repo
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Check if this run is invoked from a pull request event
       shell: bash
@@ -68,7 +68,7 @@ runs:
 
     - name: Checkout action repo
       if: ${{ env.SKIP_ACTION == 'false' }}
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         repository: smartcontractkit/.github
         ref: ${{ inputs.workflow-ref }}
diff --git a/actions/llm-pr-writer/action.yml b/actions/llm-pr-writer/action.yml
index 2ff0b14a1..f111f40d7 100644
--- a/actions/llm-pr-writer/action.yml
+++ b/actions/llm-pr-writer/action.yml
@@ -47,7 +47,7 @@ runs:
 
     - name: Checkout calling repo
       if: ${{ env.SKIP_ACTION == 'false' }}
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/md-confluence-sync/action.yml b/actions/md-confluence-sync/action.yml
index 6ebe13703..2bdf70648 100644
--- a/actions/md-confluence-sync/action.yml
+++ b/actions/md-confluence-sync/action.yml
@@ -39,7 +39,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
@@ -50,7 +50,7 @@ runs:
         prettier-command: pnpm prettier --check ${{ inputs.files }}
 
     - name: Set up Go
-      uses: actions/setup-go@v6
+      uses: actions/setup-go@v7
 
     - name: Setup tools
       shell: bash
diff --git a/actions/parse-and-mask-test-secrets/action.yml b/actions/parse-and-mask-test-secrets/action.yml
index 8638a91a7..72ce8c516 100644
--- a/actions/parse-and-mask-test-secrets/action.yml
+++ b/actions/parse-and-mask-test-secrets/action.yml
@@ -11,7 +11,7 @@ runs:
   using: composite
   steps:
     - name: Setup Go
-      uses: actions/setup-go@v6
+      uses: actions/setup-go@v7
       with:
         go-version: 1.21.3
 
diff --git a/actions/pr-quality-check/action.yml b/actions/pr-quality-check/action.yml
index 616ad2fd4..a2c7b40c8 100644
--- a/actions/pr-quality-check/action.yml
+++ b/actions/pr-quality-check/action.yml
@@ -102,7 +102,7 @@ runs:
 
     - name: Setup Python
       if: env.SHOULD_RUN == 'true' && github.event.action != 'closed'
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@v6
       with:
         python-version: "3.11"
 
diff --git a/actions/setup-golang/action.yml b/actions/setup-golang/action.yml
index 8c285c2a3..8731adb95 100644
--- a/actions/setup-golang/action.yml
+++ b/actions/setup-golang/action.yml
@@ -49,7 +49,7 @@ runs:
         echo "version=$version" >> "$GITHUB_OUTPUT"
 
     - name: Set up Go
-      uses: actions/setup-go@v6
+      uses: actions/setup-go@v7
       with:
         go-version: ${{ steps.go-version.outputs.version }}
         cache: ${{ inputs.use-go-cache }}
diff --git a/actions/setup-renovate/action.yml b/actions/setup-renovate/action.yml
index 76cd88c7b..f9bd34c05 100644
--- a/actions/setup-renovate/action.yml
+++ b/actions/setup-renovate/action.yml
@@ -48,7 +48,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/slack-notify-git-ref/action.yml b/actions/slack-notify-git-ref/action.yml
index d442a0a4d..b0110bc89 100644
--- a/actions/slack-notify-git-ref/action.yml
+++ b/actions/slack-notify-git-ref/action.yml
@@ -63,7 +63,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
     - name: Validate inputs
diff --git a/actions/update-actions/action.yml b/actions/update-actions/action.yml
index 3a01cfcf9..981b85dca 100644
--- a/actions/update-actions/action.yml
+++ b/actions/update-actions/action.yml
@@ -37,7 +37,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/validate-protos-version/action.yml b/actions/validate-protos-version/action.yml
index 361e6cfa4..c81165d17 100644
--- a/actions/validate-protos-version/action.yml
+++ b/actions/validate-protos-version/action.yml
@@ -8,7 +8,7 @@ runs:
   using: composite
   steps:
     - name: Checkout chainlink-protos
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         repository: smartcontractkit/chainlink-protos
         ref: capabilities-development