diff --git a/.github/workflows/automated-tests.yaml b/.github/workflows/automated-tests.yaml
index 90221b02a3..463e3976a3 100644
--- a/.github/workflows/automated-tests.yaml
+++ b/.github/workflows/automated-tests.yaml
@@ -24,7 +24,7 @@ jobs:
         with:
           egress-policy: audit
 
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         with:
           submodules: 'recursive'
 
diff --git a/.github/workflows/build-automated-tests-image.yaml b/.github/workflows/build-automated-tests-image.yaml
index 658c631494..d8086b5dfd 100644
--- a/.github/workflows/build-automated-tests-image.yaml
+++ b/.github/workflows/build-automated-tests-image.yaml
@@ -11,7 +11,7 @@ jobs:
         with:
           egress-policy: audit
 
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         with:
           submodules: 'recursive'
 
diff --git a/.github/workflows/check-links-scheduled.yml b/.github/workflows/check-links-scheduled.yml
index cae19e3802..9d2e911d00 100644
--- a/.github/workflows/check-links-scheduled.yml
+++ b/.github/workflows/check-links-scheduled.yml
@@ -19,7 +19,7 @@ jobs:
         uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
         with:
           egress-policy: audit
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         with:
           submodules: 'recursive'
 
diff --git a/.github/workflows/check-links.yml b/.github/workflows/check-links.yml
index 49e637a77d..266c4a34f1 100644
--- a/.github/workflows/check-links.yml
+++ b/.github/workflows/check-links.yml
@@ -40,7 +40,7 @@ jobs:
         uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
         with:
           egress-policy: audit
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - name: Wait for Pages changed to be neutral
         uses: fountainhead/action-wait-for-check@5a908a24814494009c4bb27c242ea38c93c593be # v1.2.0
         id: waitForCheck
diff --git a/.github/workflows/event-gateway-tests.yaml b/.github/workflows/event-gateway-tests.yaml
index 9d265db016..9ab039c267 100644
--- a/.github/workflows/event-gateway-tests.yaml
+++ b/.github/workflows/event-gateway-tests.yaml
@@ -26,7 +26,7 @@ jobs:
         with:
           egress-policy: audit
 
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         with:
           submodules: 'recursive'
 
diff --git a/.github/workflows/gateway-tests.yaml b/.github/workflows/gateway-tests.yaml
index dc72c5c1ee..9117ec00f3 100644
--- a/.github/workflows/gateway-tests.yaml
+++ b/.github/workflows/gateway-tests.yaml
@@ -28,7 +28,7 @@ jobs:
         with:
           egress-policy: audit
 
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         with:
           submodules: 'recursive'
 
diff --git a/.github/workflows/generate-gateway-plugins-changelogs.yml b/.github/workflows/generate-gateway-plugins-changelogs.yml
index 7683081013..4667eaf66d 100644
--- a/.github/workflows/generate-gateway-plugins-changelogs.yml
+++ b/.github/workflows/generate-gateway-plugins-changelogs.yml
@@ -45,7 +45,7 @@ jobs:
           owner: Kong
 
       - name: Checkout developer.konghq.com
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         with:
           token: ${{ steps.app-token.outputs.token }}
 
@@ -66,7 +66,7 @@ jobs:
           npm ci
 
       - name: Checkout kong-ee repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         with:
           repository: 'Kong/kong-ee'
           token: ${{ steps.app-token.outputs.token }}
diff --git a/.github/workflows/generate-inso-cli-docs.yaml b/.github/workflows/generate-inso-cli-docs.yaml
index 35a51bc7c5..638e259bac 100644
--- a/.github/workflows/generate-inso-cli-docs.yaml
+++ b/.github/workflows/generate-inso-cli-docs.yaml
@@ -37,13 +37,13 @@ jobs:
           owner: Kong
 
       - name: Checkout developer.konghq.com
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         with:
           token: ${{ steps.app-token.outputs.token }}
           ref: ${{ inputs.dev_site_base_branch }}
 
       - name: Checkout insomnia repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         with:
           repository: 'Kong/insomnia'
           token: ${{ steps.app-token.outputs.token }}
diff --git a/.github/workflows/generate-kong-conf-json.yml b/.github/workflows/generate-kong-conf-json.yml
index 0af0e8a8b5..c8e8009bd8 100644
--- a/.github/workflows/generate-kong-conf-json.yml
+++ b/.github/workflows/generate-kong-conf-json.yml
@@ -46,7 +46,7 @@ jobs:
           owner: Kong
           
       - name: Checkout developer.konghq.com
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         with:
           token: ${{ steps.app-token.outputs.token }}
 
@@ -63,7 +63,7 @@ jobs:
           npm ci
 
       - name: Checkout kong-ee repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         with:
           repository: 'Kong/kong-ee'
           token: ${{ steps.app-token.outputs.token }}
diff --git a/.github/workflows/linting.yml b/.github/workflows/linting.yml
index 0fd9b72367..685b782d40 100644
--- a/.github/workflows/linting.yml
+++ b/.github/workflows/linting.yml
@@ -39,7 +39,7 @@ jobs:
         uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
         with:
           egress-policy: audit
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         with:
           fetch-depth: 2
       - name: Get changed files
diff --git a/.github/workflows/missing-redirects.yaml b/.github/workflows/missing-redirects.yaml
index 94bde84344..a2c28d5345 100644
--- a/.github/workflows/missing-redirects.yaml
+++ b/.github/workflows/missing-redirects.yaml
@@ -40,7 +40,7 @@ jobs:
         uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
         with:
           egress-policy: audit
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         with:
           fetch-depth: 0
       - name: Wait for Pages changed to be neutral
diff --git a/.github/workflows/security.yaml b/.github/workflows/security.yaml
index b5ca0bf8c4..0020e17275 100644
--- a/.github/workflows/security.yaml
+++ b/.github/workflows/security.yaml
@@ -11,7 +11,7 @@ jobs:
         with:
           egress-policy: audit
       - name: Checkout code
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - name: Ensure SHA pinned actions
         uses: zgosalvez/github-actions-ensure-sha-pinned-actions@ca46236c6ce584ae24bc6283ba8dcf4b3ec8a066 # v5
         with:
diff --git a/.github/workflows/sync-deck.yml b/.github/workflows/sync-deck.yml
index 1743ce3fbd..83f5202436 100644
--- a/.github/workflows/sync-deck.yml
+++ b/.github/workflows/sync-deck.yml
@@ -28,7 +28,7 @@ jobs:
           owner: Kong
 
       - uses: Kong/setup-deck@v1
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - name: Fetch OAS Data
         run: |
           cd tools/deck-versions
diff --git a/.github/workflows/sync-kongctl.yml b/.github/workflows/sync-kongctl.yml
index 080fb1bbdd..daeebf668f 100644
--- a/.github/workflows/sync-kongctl.yml
+++ b/.github/workflows/sync-kongctl.yml
@@ -28,7 +28,7 @@ jobs:
           private-key: ${{ secrets.GH_APP_KONG_DOCS_SECRET }}
           owner: Kong
 
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - uses: kong/setup-kongctl@659d5c2b0f4db2e25d63797035358a22907421db # v1
 
diff --git a/.github/workflows/sync-konnect-oas-data.yml b/.github/workflows/sync-konnect-oas-data.yml
index c2f801f241..54c327202c 100644
--- a/.github/workflows/sync-konnect-oas-data.yml
+++ b/.github/workflows/sync-konnect-oas-data.yml
@@ -23,7 +23,7 @@ jobs:
           private-key: ${{ secrets.GH_APP_KONG_DOCS_SECRET }}
           owner: Kong
 
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - name: Fetch OAS Data
         run: |
           cd tools/konnect-oas-data-generator
diff --git a/.github/workflows/sync-kuma-submodule.yml b/.github/workflows/sync-kuma-submodule.yml
index 38501da7f1..18bc7b9155 100644
--- a/.github/workflows/sync-kuma-submodule.yml
+++ b/.github/workflows/sync-kuma-submodule.yml
@@ -57,7 +57,7 @@ jobs:
           owner: Kong
 
       - name: 'Check-out current repo'
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         with:
           submodules: true
           ref: main
diff --git a/.github/workflows/sync-preview-branch.yaml b/.github/workflows/sync-preview-branch.yaml
index 2b1e4629d7..02555a2a24 100644
--- a/.github/workflows/sync-preview-branch.yaml
+++ b/.github/workflows/sync-preview-branch.yaml
@@ -20,7 +20,7 @@ jobs:
           egress-policy: audit
 
       - name: Checkout main
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         with:
           ref: main
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/validate-frontmatters.yml b/.github/workflows/validate-frontmatters.yml
index c95ed41d2d..27511e7bbf 100644
--- a/.github/workflows/validate-frontmatters.yml
+++ b/.github/workflows/validate-frontmatters.yml
@@ -15,7 +15,7 @@ jobs:
         uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
         with:
           egress-policy: audit
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - name: Run validator
         working-directory: tools/frontmatter-validator
         run: |
diff --git a/.github/workflows/validate-plugin-examples.yml b/.github/workflows/validate-plugin-examples.yml
index 387df1a3a0..86aa47275d 100644
--- a/.github/workflows/validate-plugin-examples.yml
+++ b/.github/workflows/validate-plugin-examples.yml
@@ -19,7 +19,7 @@ jobs:
         uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
         with:
           egress-policy: audit
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         with:
           fetch-depth: 2
       - name: Get changed files