diff --git a/.github/workflows/crowdin-download-translations.yml b/.github/workflows/crowdin-download-translations.yml
index 4615976164..744aab3a0c 100644
--- a/.github/workflows/crowdin-download-translations.yml
+++ b/.github/workflows/crowdin-download-translations.yml
@@ -10,7 +10,7 @@ jobs:
     if: github.repository_owner == 'opencast'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Prepare git
         run: |
diff --git a/.github/workflows/crowdin-upload-keys.yml b/.github/workflows/crowdin-upload-keys.yml
index 6730d0b00e..ba7dfb38d0 100644
--- a/.github/workflows/crowdin-upload-keys.yml
+++ b/.github/workflows/crowdin-upload-keys.yml
@@ -15,7 +15,7 @@ jobs:
     if: github.repository_owner == 'opencast'
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
 
     - name: Prepare crowdin client
       run: |
diff --git a/.github/workflows/deploy-main-branches.yml b/.github/workflows/deploy-main-branches.yml
index a5ae0d07be..f612bf58d7 100644
--- a/.github/workflows/deploy-main-branches.yml
+++ b/.github/workflows/deploy-main-branches.yml
@@ -24,7 +24,7 @@ jobs:
       branch: ${{ steps.branch-name.outputs.branch }}
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Determine the correct test server
         id: test-server
@@ -45,7 +45,7 @@ jobs:
     needs: detect-repo-owner
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Ensure our node version matches the main repo's version
         run: |
diff --git a/.github/workflows/pr-build-test-branch.yml b/.github/workflows/pr-build-test-branch.yml
index 810fe4c99a..8c16a11de1 100644
--- a/.github/workflows/pr-build-test-branch.yml
+++ b/.github/workflows/pr-build-test-branch.yml
@@ -22,7 +22,7 @@ jobs:
       branch: ${{ steps.branch-name.outputs.branch }}
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Determine the correct test server
         id: test-server
@@ -45,7 +45,7 @@ jobs:
         id: build-path
 
       - name: Checkout sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Get Node.js
         uses: actions/setup-node@v5
@@ -80,7 +80,7 @@ jobs:
 
     steps:
       - name: Checkout Sources
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Get changed locale files
         uses: dorny/paths-filter@v4
diff --git a/.github/workflows/pr-test-build.yml b/.github/workflows/pr-test-build.yml
index deca461bc1..baf7e2f7fe 100644
--- a/.github/workflows/pr-test-build.yml
+++ b/.github/workflows/pr-test-build.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Ensure our node version matches the main repo's version for pull requests
         if: github.event_name == 'pull_request'