diff --git a/.github/workflows/generate-api-docs-community-contracts.yml b/.github/workflows/generate-api-docs-community-contracts.yml
index fb0c20af..c2109b44 100644
--- a/.github/workflows/generate-api-docs-community-contracts.yml
+++ b/.github/workflows/generate-api-docs-community-contracts.yml
@@ -49,7 +49,7 @@ jobs:
           echo "📋 Trigger type: ${{ inputs.trigger_type }}"
 
       - name: Checkout docs repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
 
diff --git a/.github/workflows/generate-api-docs-confidential-contracts.yml b/.github/workflows/generate-api-docs-confidential-contracts.yml
index 1858cd20..86778c29 100644
--- a/.github/workflows/generate-api-docs-confidential-contracts.yml
+++ b/.github/workflows/generate-api-docs-confidential-contracts.yml
@@ -40,7 +40,7 @@ jobs:
           echo "📋 Trigger type: ${{ inputs.trigger_type }}"
 
       - name: Checkout docs repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
 
diff --git a/.github/workflows/generate-api-docs-contracts.yml b/.github/workflows/generate-api-docs-contracts.yml
index 51480d5c..a7e44052 100644
--- a/.github/workflows/generate-api-docs-contracts.yml
+++ b/.github/workflows/generate-api-docs-contracts.yml
@@ -40,7 +40,7 @@ jobs:
           echo "📋 Trigger type: ${{ inputs.trigger_type }}"
 
       - name: Checkout docs repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
 
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 4497e769..9c8c7dad 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v6
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index cceb6716..2c27189a 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -30,12 +30,12 @@ jobs:
       # actions: read
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
         with:
           egress-policy: audit
 
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
 
@@ -56,6 +56,6 @@ jobs:
           retention-days: 5
 
       - name: Upload SARIF to GitHub Code Scanning
-        uses: github/codeql-action/upload-sarif@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
+        uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/sync-search.yml b/.github/workflows/sync-search.yml
index af7337d7..88d4ce53 100644
--- a/.github/workflows/sync-search.yml
+++ b/.github/workflows/sync-search.yml
@@ -10,7 +10,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2