diff --git a/.github/workflows/build-ort-archives.yml b/.github/workflows/build-ort-archives.yml
index ccf5d06..0ec5603 100644
--- a/.github/workflows/build-ort-archives.yml
+++ b/.github/workflows/build-ort-archives.yml
@@ -61,7 +61,7 @@ jobs:
             echo "\`$sha\`"
           } >> "$GITHUB_STEP_SUMMARY"
       - name: Upload archive
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
         with:
           name: ort-static-${{ matrix.target }}
           path: |
diff --git a/.github/workflows/metal-smoke.yml b/.github/workflows/metal-smoke.yml
index f3e6578..4d3b67f 100644
--- a/.github/workflows/metal-smoke.yml
+++ b/.github/workflows/metal-smoke.yml
@@ -22,7 +22,7 @@ jobs:
     env:
       CXXFLAGS: "-std=gnu++17"
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
       - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4  # v2.9.1
         with:
           key: metal
diff --git a/.github/workflows/ort-probe.yml b/.github/workflows/ort-probe.yml
index 64597cf..c724823 100644
--- a/.github/workflows/ort-probe.yml
+++ b/.github/workflows/ort-probe.yml
@@ -34,7 +34,7 @@ jobs:
           - { runner: ubuntu-22.04-arm, target: aarch64-unknown-linux-gnu }
           - { runner: windows-2022, target: x86_64-pc-windows-msvc }
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
       - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4  # v2.9.1
         with:
           key: ort-probe-${{ matrix.target }}