diff --git a/.github/workflows/cd-deploy.yml b/.github/workflows/cd-deploy.yml
index e407c620e..96b4dee53 100644
--- a/.github/workflows/cd-deploy.yml
+++ b/.github/workflows/cd-deploy.yml
@@ -45,7 +45,7 @@ jobs:
     environment: ${{ github.event.inputs.environment }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Install SSH key
         run: |
diff --git a/.github/workflows/cd-rollback.yml b/.github/workflows/cd-rollback.yml
index 65f867a4b..3196041d6 100644
--- a/.github/workflows/cd-rollback.yml
+++ b/.github/workflows/cd-rollback.yml
@@ -64,7 +64,7 @@ jobs:
     environment: production
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Install SSH key
         run: |
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index eab7a989e..f9f891b47 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -31,7 +31,7 @@ jobs:
       docker: ${{ steps.filter.outputs.docker }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Detect changed paths
         id: filter
@@ -68,7 +68,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup JDK 17
         uses: actions/setup-java@v5
@@ -124,7 +124,7 @@ jobs:
       JWT_SECRET: test-jwt-secret-key-for-ci-minimum-32-characters-long
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup JDK 17
         uses: actions/setup-java@v5
@@ -205,7 +205,7 @@ jobs:
       USE_NOTIFICATION_INTENT: 'false'
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup JDK 17
         uses: actions/setup-java@v5
@@ -276,7 +276,7 @@ jobs:
       DB_NAME: ulticode_test
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Wait for MySQL
         run: |
@@ -309,7 +309,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Run Gitleaks
         run: |
           docker run --rm \
@@ -328,7 +328,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Lint migration filenames
         run: |
           set -e
@@ -368,7 +368,7 @@ jobs:
 
       - name: Checkout repository
         if: steps.should-run.outputs.run == 'true'
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Enable pnpm via corepack
         if: steps.should-run.outputs.run == 'true'
@@ -376,7 +376,7 @@ jobs:
 
       - name: Setup Node.js
         if: steps.should-run.outputs.run == 'true'
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: 'pnpm'
@@ -413,7 +413,7 @@ jobs:
 
       - name: Checkout repository
         if: steps.should-run.outputs.run == 'true'
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Enable pnpm via corepack
         if: steps.should-run.outputs.run == 'true'
@@ -421,7 +421,7 @@ jobs:
 
       - name: Setup Node.js
         if: steps.should-run.outputs.run == 'true'
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: 'pnpm'
@@ -458,7 +458,7 @@ jobs:
 
       - name: Checkout repository
         if: steps.should-run.outputs.run == 'true'
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Enable pnpm via corepack
         if: steps.should-run.outputs.run == 'true'
@@ -466,7 +466,7 @@ jobs:
 
       - name: Setup Node.js
         if: steps.should-run.outputs.run == 'true'
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: 'pnpm'
@@ -497,11 +497,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Enable pnpm via corepack
         run: corepack enable && corepack prepare pnpm@${{ env.PNPM_VERSION }} --activate
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: 'pnpm'
@@ -521,13 +521,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Enable pnpm via corepack
         run: corepack enable && corepack prepare pnpm@${{ env.PNPM_VERSION }} --activate
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: 'pnpm'
@@ -566,7 +566,7 @@ jobs:
             dockerfile: ./management/Dockerfile
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4
diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index 489687aaa..ad9260281 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -32,7 +32,7 @@ jobs:
             dockerfile: ./management/Dockerfile
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4