diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b3ed08af..9a419b0c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -25,7 +25,7 @@ jobs:
   build-release:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6
         with:
           persist-credentials: false
       - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
diff --git a/.github/workflows/test-docs.yml b/.github/workflows/test-docs.yml
index 20bb89b1..378cb9b7 100644
--- a/.github/workflows/test-docs.yml
+++ b/.github/workflows/test-docs.yml
@@ -22,7 +22,7 @@ jobs:
   test-docs:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v7.0.0
         with:
           # make rediraffecheckdiff requires git history to compare current
           # commit with the main branch and previous releases.
diff --git a/.github/workflows/test-ssh.yml b/.github/workflows/test-ssh.yml
index 34369d25..238b0fcd 100644
--- a/.github/workflows/test-ssh.yml
+++ b/.github/workflows/test-ssh.yml
@@ -51,7 +51,7 @@ jobs:
             runs_on: windows-2022
 
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v7.0.0
         with:
           persist-credentials: false
 
@@ -157,4 +157,4 @@ jobs:
           pytest -v --maxfail=2 --cov=ipyparallel ipyparallel/tests/test_ssh.py
 
       - name: Submit codecov report
-        uses: codecov/codecov-action@v6
+        uses: codecov/codecov-action@v7
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 7a1ea0fc..59303f8d 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -53,19 +53,19 @@ jobs:
             pre: pre
 
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v7.0.0
         with:
           persist-credentials: false
 
       - name: Cache conda environment
-        uses: actions/cache@v5
+        uses: actions/cache@v6.1.0
         with:
           path: |
             ~/conda
           key: conda
 
       - name: Cache node_modules
-        uses: actions/cache@v5
+        uses: actions/cache@v6.1.0
         with:
           path: |
             node_modules
@@ -177,7 +177,7 @@ jobs:
           ${EXEC} chmod -R a+rw .coverage*
 
       - name: Submit codecov report
-        uses: codecov/codecov-action@v6
+        uses: codecov/codecov-action@v7
 
       - name: Report on slurm
         if: ${{ matrix.cluster_type == 'slurm' && failure() }}
diff --git a/.github/workflows/windows-ssh-image.yaml b/.github/workflows/windows-ssh-image.yaml
index b7c5e2cf..348e1753 100644
--- a/.github/workflows/windows-ssh-image.yaml
+++ b/.github/workflows/windows-ssh-image.yaml
@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v7.0.0
         with:
           persist-credentials: false