diff --git a/.github/workflows/ci-pre-commit.yml b/.github/workflows/ci-pre-commit.yml
index e7d894b004..2fbd9f4dad 100644
--- a/.github/workflows/ci-pre-commit.yml
+++ b/.github/workflows/ci-pre-commit.yml
@@ -11,7 +11,7 @@ jobs:
     name: pre-commit hooks
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.0
       - uses: actions/setup-python@v6
         with:
           python-version: '3.12'
diff --git a/.github/workflows/conda.yml b/.github/workflows/conda.yml
index d992f57f71..72e840dcae 100644
--- a/.github/workflows/conda.yml
+++ b/.github/workflows/conda.yml
@@ -18,7 +18,7 @@ jobs:
     name: Build (and upload)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.0
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml
index 08fda8aafd..aa071a04ee 100644
--- a/.github/workflows/release-drafter.yml
+++ b/.github/workflows/release-drafter.yml
@@ -17,7 +17,7 @@ jobs:
       pull-requests: read
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.0
         with:
           fetch-depth: 0  # Required to get tag history
       - name: Check if release commit
diff --git a/.github/workflows/release-publish.yml b/.github/workflows/release-publish.yml
index a4ce745f38..d9e49b0745 100644
--- a/.github/workflows/release-publish.yml
+++ b/.github/workflows/release-publish.yml
@@ -18,7 +18,7 @@ jobs:
     if: github.repository == 'dask/distributed'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.0
         with:
           fetch-depth: 0
       - uses: actions/setup-python@v6
diff --git a/.github/workflows/test-report.yaml b/.github/workflows/test-report.yaml
index 80c998f092..0992f1bd16 100644
--- a/.github/workflows/test-report.yaml
+++ b/.github/workflows/test-report.yaml
@@ -18,7 +18,7 @@ jobs:
       run:
         shell: bash -l {0}
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.0
 
       - name: Setup Conda Environment
         uses: conda-incubator/setup-miniconda@v4.0.1
diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index 93df568f3b..cc09492fda 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -100,7 +100,7 @@ jobs:
 
     steps:
       - name: Checkout source
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.0
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/upstream.yml b/.github/workflows/upstream.yml
index 7f642f383f..8c5189d5a3 100644
--- a/.github/workflows/upstream.yml
+++ b/.github/workflows/upstream.yml
@@ -33,7 +33,7 @@ jobs:
 
     steps:
       - name: Checkout source
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.0
         with:
           fetch-depth: 0