diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 5f4a9ba..d108951 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -24,7 +24,7 @@ jobs:
       artifact-id: ${{steps.upload.outputs.artifact-id}}
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Setup Pages
         uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
       - name: Verify lockfile has no non-registry sources
diff --git a/.github/workflows/update-windows-info.yml b/.github/workflows/update-windows-info.yml
index 352d2f0..88b96ee 100644
--- a/.github/workflows/update-windows-info.yml
+++ b/.github/workflows/update-windows-info.yml
@@ -19,7 +19,7 @@ jobs:
       DESKTOP_VERSION: ${{ github.event.client_payload.version }}
     steps:
       - name: Checkout repo
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Create new branch
         run: |
           git config --global --add safe.directory "$GITHUB_WORKSPACE"