diff --git a/.github/workflows/kairos-ubuntu-22-lts.yml b/.github/workflows/kairos-ubuntu-22-lts.yml
index 8f8ec13..5594ca7 100644
--- a/.github/workflows/kairos-ubuntu-22-lts.yml
+++ b/.github/workflows/kairos-ubuntu-22-lts.yml
@@ -35,7 +35,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           # renovate: datasource=docker depName=earthly/earthly
           version: "v0.8.14"
-      - uses: actions/checkout@v4.1.6
+      - uses: actions/checkout@v4.1.7
       - uses: docker/setup-qemu-action@v3
 
       - name: Login to GitHub Container Hub
diff --git a/.github/workflows/kairos-zsh-bundle.yml b/.github/workflows/kairos-zsh-bundle.yml
index 4289d47..590ee14 100644
--- a/.github/workflows/kairos-zsh-bundle.yml
+++ b/.github/workflows/kairos-zsh-bundle.yml
@@ -34,7 +34,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           # renovate: datasource=docker depName=earthly/earthly
           version: "v0.8.14"
-      - uses: "actions/checkout@v4.1.6"
+      - uses: "actions/checkout@v4.1.7"
 
       - name: "Login to GitHub Container Hub"
         run: docker login --username "${{ github.actor }}" --password "${{ secrets.GITHUB_TOKEN }}" ghcr.io
diff --git a/.github/workflows/kustomization-tests.yml b/.github/workflows/kustomization-tests.yml
index 58513a4..41c639d 100644
--- a/.github/workflows/kustomization-tests.yml
+++ b/.github/workflows/kustomization-tests.yml
@@ -40,7 +40,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           # renovate: datasource=docker depName=earthly/earthly
           version: "v0.8.14"
-      - uses: actions/checkout@v4.1.6
+      - uses: actions/checkout@v4.1.7
 
       - name: Build Image
         env:
diff --git a/.github/workflows/universal-silabs-flasher.yml b/.github/workflows/universal-silabs-flasher.yml
index db2142e..0329b3e 100644
--- a/.github/workflows/universal-silabs-flasher.yml
+++ b/.github/workflows/universal-silabs-flasher.yml
@@ -35,7 +35,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           # renovate: datasource=docker depName=earthly/earthly
           version: "v0.8.14"
-      - uses: "actions/checkout@v4.1.6"
+      - uses: "actions/checkout@v4.1.7"
 
       - name: "Login to GitHub Container Hub"
         run: docker login --username "${{ github.actor }}" --password "${{ secrets.GITHUB_TOKEN }}" ghcr.io
diff --git a/.github/workflows/usb-image.yml b/.github/workflows/usb-image.yml
index 7d4fd96..340ef9a 100644
--- a/.github/workflows/usb-image.yml
+++ b/.github/workflows/usb-image.yml
@@ -32,7 +32,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           # renovate: datasource=docker depName=earthly/earthly
           version: "v0.8.14"
-      - uses: "actions/checkout@v4.1.6"
+      - uses: "actions/checkout@v4.1.7"
 
       - name: "Login to GitHub Container Hub"
         if: github.event_name != 'pull_request'
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index 347fbd1..a4c4cd1 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -19,7 +19,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           # renovate: datasource=docker depName=earthly/earthly
           version: "0.8.14"
-      - uses: actions/checkout@v4.1.6
+      - uses: actions/checkout@v4.1.7
       - name: Run validation checks
         run: |
           earthly +validate
@@ -37,7 +37,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           # renovate: datasource=docker depName=earthly/earthly
           version: "0.8.14"
-      - uses: actions/checkout@v4.1.6
+      - uses: actions/checkout@v4.1.7
       - name: Run lint checks
         run: |
           earthly +lint