diff --git a/.github/workflows/agent-review-policy.yml b/.github/workflows/agent-review-policy.yml
index 032b7144..500bd469 100644
--- a/.github/workflows/agent-review-policy.yml
+++ b/.github/workflows/agent-review-policy.yml
@@ -14,7 +14,7 @@ jobs:
   agent-review-policy:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         repository: ${{ github.repository }}
         ref: ${{ github.event.pull_request.base.sha || github.sha }}
diff --git a/.github/workflows/ci-orchestrated.yml b/.github/workflows/ci-orchestrated.yml
index fe1385b6..fcd4d799 100644
--- a/.github/workflows/ci-orchestrated.yml
+++ b/.github/workflows/ci-orchestrated.yml
@@ -52,7 +52,7 @@ jobs:
     outputs:
       include_integration: ${{ steps.b.outputs.normalized }}
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
     - name: Wire Probe (J1)
       if: '${{ vars.WIRE_PROBES != ''0'' }}'
       uses: ./.github/actions/wire-probe
@@ -114,7 +114,7 @@ jobs:
       GH_TOKEN: ${{ secrets.GH_TOKEN || github.token }}
       COMPAREVI_TOOLS_IMAGE: ghcr.io/labview-community-ci-cd/comparevi-tools:latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
     - name: Wire Probe (J1)
       if: '${{ vars.WIRE_PROBES != ''0'' }}'
       uses: ./.github/actions/wire-probe
@@ -236,7 +236,7 @@ jobs:
       RESULTS_DIR: tests/results/preflight
     # Hosted Windows health gate before self-hosted jobs
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
     - name: Wire Probe (J1)
       if: '${{ vars.WIRE_PROBES != ''0'' }}'
       uses: ./.github/actions/wire-probe
@@ -285,7 +285,7 @@ jobs:
     outputs:
       ok: ${{ steps.out.outputs.ok }}
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
     - name: Wire Probe (J1)
       if: '${{ vars.WIRE_PROBES != ''0'' }}'
       uses: ./.github/actions/wire-probe
@@ -342,7 +342,7 @@ jobs:
       LABVIEW_EXE: C:\\Program Files\\National Instruments\\LabVIEW 2025\\LabVIEW.exe
       EMIT_LV_CLOSURE_CRUMBS: '1'
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
     - name: Wire Probe (J1)
       if: '${{ vars.WIRE_PROBES != ''0'' }}'
       uses: ./.github/actions/wire-probe
@@ -639,7 +639,7 @@ jobs:
       LABVIEW_EXE: C:\\Program Files\\National Instruments\\LabVIEW 2025\\LabVIEW.exe
       EMIT_LV_CLOSURE_CRUMBS: '1'
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
     - name: Wire Probe (J1)
       if: '${{ vars.WIRE_PROBES != ''0'' }}'
       uses: ./.github/actions/wire-probe
@@ -790,7 +790,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: [lint, pester-category, drift]
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
     - name: Wire Probe (J1)
       if: '${{ vars.WIRE_PROBES != ''0'' }}'
       uses: ./.github/actions/wire-probe
@@ -1029,7 +1029,7 @@ jobs:
       TRACE_MATRIX: '1'
       TRACE_MATRIX_HTML: '1'
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
     - name: Wire Probe (J1)
       if: '${{ vars.WIRE_PROBES != ''0'' }}'
       uses: ./.github/actions/wire-probe
diff --git a/.github/workflows/code-scanning.yml b/.github/workflows/code-scanning.yml
index 17b753aa..f0736317 100644
--- a/.github/workflows/code-scanning.yml
+++ b/.github/workflows/code-scanning.yml
@@ -31,7 +31,7 @@ jobs:
     timeout-minutes: 30
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
diff --git a/.github/workflows/command-dispatch.yml b/.github/workflows/command-dispatch.yml
index 98c92881..7c793da0 100644
--- a/.github/workflows/command-dispatch.yml
+++ b/.github/workflows/command-dispatch.yml
@@ -30,7 +30,7 @@ jobs:
           if [ -n "$XCLI_PAT" ]; then echo "token=$XCLI_PAT" >> "$GITHUB_OUTPUT"; else echo "token=$GITHUB_TOKEN" >> "$GITHUB_OUTPUT"; fi
 
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Runner health (notice-only)
         if: ${{ vars.RUNNER_HEALTH != '0' }}
diff --git a/.github/workflows/commit-integrity-drift-monitor.yml b/.github/workflows/commit-integrity-drift-monitor.yml
index 54b92656..f17310d0 100644
--- a/.github/workflows/commit-integrity-drift-monitor.yml
+++ b/.github/workflows/commit-integrity-drift-monitor.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-node@v6
         with:
diff --git a/.github/workflows/commit-integrity.yml b/.github/workflows/commit-integrity.yml
index 9b0d79aa..e7b71a0b 100644
--- a/.github/workflows/commit-integrity.yml
+++ b/.github/workflows/commit-integrity.yml
@@ -31,7 +31,7 @@ jobs:
       issues: write
 
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
diff --git a/.github/workflows/compare-artifacts.yml b/.github/workflows/compare-artifacts.yml
index 5d90aac0..b7c389c6 100644
--- a/.github/workflows/compare-artifacts.yml
+++ b/.github/workflows/compare-artifacts.yml
@@ -23,7 +23,7 @@ jobs:
       UNBLOCK_GUARD: '1'
       LV_SUPPRESS_UI: '1'
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
 
     - name: Preflight
       shell: pwsh
diff --git a/.github/workflows/consumer-fork-sync.yml b/.github/workflows/consumer-fork-sync.yml
index 363b32b1..14bbeec3 100644
--- a/.github/workflows/consumer-fork-sync.yml
+++ b/.github/workflows/consumer-fork-sync.yml
@@ -23,7 +23,7 @@ jobs:
       SYNC_GH_TOKEN: ${{ secrets.GH_TOKEN }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/cookiecutter-bootstrap.yml b/.github/workflows/cookiecutter-bootstrap.yml
index d52f9217..a58f29b7 100644
--- a/.github/workflows/cookiecutter-bootstrap.yml
+++ b/.github/workflows/cookiecutter-bootstrap.yml
@@ -63,7 +63,7 @@ jobs:
     runs-on: ${{ matrix.runner }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
           ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
@@ -220,7 +220,7 @@ jobs:
     needs: bootstrap-proof
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
diff --git a/.github/workflows/dotnet-shared.yml b/.github/workflows/dotnet-shared.yml
index 5d3e2ef4..d2c37565 100644
--- a/.github/workflows/dotnet-shared.yml
+++ b/.github/workflows/dotnet-shared.yml
@@ -39,7 +39,7 @@ jobs:
         - shared_source: project
           expected_resolved: project
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
diff --git a/.github/workflows/downstream-onboarding-feedback.yml b/.github/workflows/downstream-onboarding-feedback.yml
index f6bf9533..38ba3d1b 100644
--- a/.github/workflows/downstream-onboarding-feedback.yml
+++ b/.github/workflows/downstream-onboarding-feedback.yml
@@ -59,7 +59,7 @@ jobs:
       DOWNSTREAM_PILOT_REPO: ${{ vars.DOWNSTREAM_PILOT_REPO }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/downstream-promotion.yml b/.github/workflows/downstream-promotion.yml
index 6c47995f..5ca3e6a8 100644
--- a/.github/workflows/downstream-promotion.yml
+++ b/.github/workflows/downstream-promotion.yml
@@ -67,7 +67,7 @@ jobs:
       DOWNSTREAM_PILOT_REPO: ${{ vars.DOWNSTREAM_PILOT_REPO }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/fixture-drift.yml b/.github/workflows/fixture-drift.yml
index 0a416777..7df4f931 100644
--- a/.github/workflows/fixture-drift.yml
+++ b/.github/workflows/fixture-drift.yml
@@ -34,7 +34,7 @@ jobs:
       pull-requests: write
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
@@ -106,7 +106,7 @@ jobs:
       contents: read
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
diff --git a/.github/workflows/fork-guard.yml b/.github/workflows/fork-guard.yml
index 09769eff..c4ec606d 100644
--- a/.github/workflows/fork-guard.yml
+++ b/.github/workflows/fork-guard.yml
@@ -9,7 +9,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - name: Simulate pull ref
         shell: pwsh
         run: pwsh -NoLogo -NoProfile -File tests/fork-guard/invoke.ps1 -WorkflowPath .github/workflows/vi-compare-fork.yml
diff --git a/.github/workflows/human-go-no-go-feedback.yml b/.github/workflows/human-go-no-go-feedback.yml
index 27142f9e..a0b97d20 100644
--- a/.github/workflows/human-go-no-go-feedback.yml
+++ b/.github/workflows/human-go-no-go-feedback.yml
@@ -59,7 +59,7 @@ jobs:
   human-go-no-go-feedback:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-node@v6
         with:
diff --git a/.github/workflows/issue-milestone-hygiene.yml b/.github/workflows/issue-milestone-hygiene.yml
index b051a419..d71d8d6d 100644
--- a/.github/workflows/issue-milestone-hygiene.yml
+++ b/.github/workflows/issue-milestone-hygiene.yml
@@ -59,7 +59,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Evaluate milestone hygiene policy
         shell: bash
diff --git a/.github/workflows/issue-snapshot.yml b/.github/workflows/issue-snapshot.yml
index bf12cd97..ed8c0445 100644
--- a/.github/workflows/issue-snapshot.yml
+++ b/.github/workflows/issue-snapshot.yml
@@ -10,7 +10,7 @@ jobs:
   snapshot:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v6
         with:
           node-version: '20'
diff --git a/.github/workflows/labview-cli-compare.yml b/.github/workflows/labview-cli-compare.yml
index 1ef11660..e6945c6d 100644
--- a/.github/workflows/labview-cli-compare.yml
+++ b/.github/workflows/labview-cli-compare.yml
@@ -31,7 +31,7 @@ jobs:
       # Enable cleanup at the end of the job
       UNBLOCK_GUARD: '1'
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Validate native LV32 host-plane readiness
         id: host_plane
diff --git a/.github/workflows/markdownlint.yml b/.github/workflows/markdownlint.yml
index b9838308..3e446863 100644
--- a/.github/workflows/markdownlint.yml
+++ b/.github/workflows/markdownlint.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
diff --git a/.github/workflows/merge-history.yml b/.github/workflows/merge-history.yml
index 76142a25..01940007 100644
--- a/.github/workflows/merge-history.yml
+++ b/.github/workflows/merge-history.yml
@@ -13,7 +13,7 @@ jobs:
     if: ${{ github.event.pull_request.head.sha && !startsWith(github.head_ref, 'release/') }}
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
diff --git a/.github/workflows/monthly-stability-release.yml b/.github/workflows/monthly-stability-release.yml
index 9b6706f2..f16453cd 100644
--- a/.github/workflows/monthly-stability-release.yml
+++ b/.github/workflows/monthly-stability-release.yml
@@ -69,7 +69,7 @@ jobs:
       shared_version: ${{ steps.eval.outputs.shared_version }}
       shared_channel: ${{ steps.eval.outputs.shared_channel }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Enforce rollback drill health gate
         shell: bash
@@ -245,7 +245,7 @@ jobs:
     needs: [evaluate-window, approval-gate, publish-tools, publish-shared]
     if: always()
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Download rollback drill health artifact
         uses: actions/download-artifact@v8
diff --git a/.github/workflows/pester-context.yml b/.github/workflows/pester-context.yml
index c9caba96..40765f94 100644
--- a/.github/workflows/pester-context.yml
+++ b/.github/workflows/pester-context.yml
@@ -60,7 +60,7 @@ jobs:
       standing_priority_issue: ${{ steps.receipt.outputs.standing_priority_issue }}
       standing_priority_reason: ${{ steps.receipt.outputs.reason }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           repository: ${{ inputs.checkout_repository || github.repository }}
           ref: ${{ inputs.checkout_ref || github.sha }}
diff --git a/.github/workflows/pester-evidence.yml b/.github/workflows/pester-evidence.yml
index 8321172e..b46220ce 100644
--- a/.github/workflows/pester-evidence.yml
+++ b/.github/workflows/pester-evidence.yml
@@ -109,7 +109,7 @@ jobs:
       errors: ${{ steps.export.outputs.errors }}
       duration_s: ${{ steps.export.outputs.duration_s }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Resolve raw artifact name
         id: artifact_name
diff --git a/.github/workflows/pester-integration-on-label.yml b/.github/workflows/pester-integration-on-label.yml
index 561f5d04..f3857a09 100644
--- a/.github/workflows/pester-integration-on-label.yml
+++ b/.github/workflows/pester-integration-on-label.yml
@@ -22,7 +22,7 @@ jobs:
     outputs:
       docs_only: ${{ steps.d.outputs.normalized }}
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
diff --git a/.github/workflows/pester-reusable.yml b/.github/workflows/pester-reusable.yml
index a8b00eec..4f860225 100644
--- a/.github/workflows/pester-reusable.yml
+++ b/.github/workflows/pester-reusable.yml
@@ -57,7 +57,7 @@ jobs:
     outputs:
       include_integration: ${{ steps.b.outputs.normalized }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - name: Apply determinism profile
         uses: ./.github/actions/determinism-profile
         with:
@@ -84,7 +84,7 @@ jobs:
       LV_IDLE_WAIT_SECONDS: ${{ vars.LV_IDLE_WAIT_SECONDS || '2' }}
       LV_IDLE_MAX_WAIT_SECONDS: ${{ vars.LV_IDLE_MAX_WAIT_SECONDS || '5' }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - name: Rogue LV scan (notice-only)
         shell: pwsh
         run: pwsh -File tools/Detect-RogueLV.ps1 -ResultsDir tests/results -LookBackSeconds 900
@@ -153,7 +153,7 @@ jobs:
       errors: ${{ steps.export.outputs.errors }}
       duration_s: ${{ steps.export.outputs.duration_s }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - name: Install Node dependencies
         shell: pwsh
         run: node tools/npm/cli.mjs ci
diff --git a/.github/workflows/pester-run.yml b/.github/workflows/pester-run.yml
index 8553d46a..80c1a935 100644
--- a/.github/workflows/pester-run.yml
+++ b/.github/workflows/pester-run.yml
@@ -124,7 +124,7 @@ jobs:
       selection_execution_pack: ${{ steps.selection_receipt.outputs.execution_pack }}
       selection_execution_pack_source: ${{ steps.selection_receipt.outputs.execution_pack_source }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           repository: ${{ inputs.checkout_repository || github.repository }}
           ref: ${{ inputs.checkout_ref || github.sha }}
diff --git a/.github/workflows/pester-selection.yml b/.github/workflows/pester-selection.yml
index ecfe4781..4bda80e4 100644
--- a/.github/workflows/pester-selection.yml
+++ b/.github/workflows/pester-selection.yml
@@ -77,7 +77,7 @@ jobs:
       receipt_status: ${{ steps.receipt.outputs.status }}
       receipt_artifact_name: ${{ steps.receipt.outputs.artifact_name }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           repository: ${{ inputs.checkout_repository || github.repository }}
           ref: ${{ inputs.checkout_ref || github.sha }}
diff --git a/.github/workflows/pester-service-model-quality.yml b/.github/workflows/pester-service-model-quality.yml
index 2b1d0f56..bfffe85d 100644
--- a/.github/workflows/pester-service-model-quality.yml
+++ b/.github/workflows/pester-service-model-quality.yml
@@ -64,7 +64,7 @@ jobs:
     name: PR Coverage Gate / coverage
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
           ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
@@ -102,7 +102,7 @@ jobs:
     name: Docs link check / lychee
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
           ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
diff --git a/.github/workflows/pester-service-model-release-evidence.yml b/.github/workflows/pester-service-model-release-evidence.yml
index 33ae0375..1cd14326 100644
--- a/.github/workflows/pester-service-model-release-evidence.yml
+++ b/.github/workflows/pester-service-model-release-evidence.yml
@@ -87,7 +87,7 @@ jobs:
     name: Release evidence / pester-service-model
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
           ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
diff --git a/.github/workflows/policy-guard-upstream.yml b/.github/workflows/policy-guard-upstream.yml
index 06613a27..254491d1 100644
--- a/.github/workflows/policy-guard-upstream.yml
+++ b/.github/workflows/policy-guard-upstream.yml
@@ -45,7 +45,7 @@ jobs:
       contents: read
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v5
+      uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.event_name == 'pull_request_target' && github.event.pull_request.head.repo.owner.login == github.repository_owner && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.event_name == 'pull_request_target' && github.event.pull_request.head.repo.owner.login == github.repository_owner && github.event.pull_request.head.sha || github.event_name == 'pull_request_target' && github.event.pull_request.base.sha || github.sha }}
diff --git a/.github/workflows/policy-sync.yml b/.github/workflows/policy-sync.yml
index d06159ea..432d9b8f 100644
--- a/.github/workflows/policy-sync.yml
+++ b/.github/workflows/policy-sync.yml
@@ -16,7 +16,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/prime-lvcompare-preflight.yml b/.github/workflows/prime-lvcompare-preflight.yml
index 6a3440e2..40ababbe 100644
--- a/.github/workflows/prime-lvcompare-preflight.yml
+++ b/.github/workflows/prime-lvcompare-preflight.yml
@@ -9,7 +9,7 @@ jobs:
     name: Prime LVCompare (stubbed)
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Prepare stub LVCompare and test VIs
         shell: pwsh
diff --git a/.github/workflows/print-to-single-file-html-proof.yml b/.github/workflows/print-to-single-file-html-proof.yml
index d5da664a..2dfe035a 100644
--- a/.github/workflows/print-to-single-file-html-proof.yml
+++ b/.github/workflows/print-to-single-file-html-proof.yml
@@ -16,7 +16,7 @@ jobs:
   print-to-single-file-html-proof:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/promotion-contract.yml b/.github/workflows/promotion-contract.yml
index a6aaa236..d688787e 100644
--- a/.github/workflows/promotion-contract.yml
+++ b/.github/workflows/promotion-contract.yml
@@ -39,7 +39,7 @@ jobs:
     name: promotion-contract
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
diff --git a/.github/workflows/public-linux-diagnostics-harness.yml b/.github/workflows/public-linux-diagnostics-harness.yml
index 235d9127..c6bfa9b2 100644
--- a/.github/workflows/public-linux-diagnostics-harness.yml
+++ b/.github/workflows/public-linux-diagnostics-harness.yml
@@ -27,7 +27,7 @@ jobs:
   public-linux-diagnostics-harness:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/publish-shared-package.yml b/.github/workflows/publish-shared-package.yml
index 38e32fe0..ef8a1936 100644
--- a/.github/workflows/publish-shared-package.yml
+++ b/.github/workflows/publish-shared-package.yml
@@ -34,7 +34,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Assert promotion contract alignment
         shell: pwsh
diff --git a/.github/workflows/publish-tools-image.yml b/.github/workflows/publish-tools-image.yml
index 5ff11685..23ebaaea 100644
--- a/.github/workflows/publish-tools-image.yml
+++ b/.github/workflows/publish-tools-image.yml
@@ -32,7 +32,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Assert promotion contract alignment
         shell: pwsh
diff --git a/.github/workflows/queue-supervisor.yml b/.github/workflows/queue-supervisor.yml
index 9e6e90ff..41d16fc8 100644
--- a/.github/workflows/queue-supervisor.yml
+++ b/.github/workflows/queue-supervisor.yml
@@ -52,7 +52,7 @@ jobs:
       pull-requests: write
       actions: read
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/release-cadence-check.yml b/.github/workflows/release-cadence-check.yml
index b748fbcf..83deb990 100644
--- a/.github/workflows/release-cadence-check.yml
+++ b/.github/workflows/release-cadence-check.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Evaluate package freshness and reconcile stale issue
         env:
diff --git a/.github/workflows/release-conductor.yml b/.github/workflows/release-conductor.yml
index 726ae7e1..a1113b7f 100644
--- a/.github/workflows/release-conductor.yml
+++ b/.github/workflows/release-conductor.yml
@@ -50,7 +50,7 @@ jobs:
       contents: write
       actions: read
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/release-rollback-drill.yml b/.github/workflows/release-rollback-drill.yml
index 3f051193..d81b4ad9 100644
--- a/.github/workflows/release-rollback-drill.yml
+++ b/.github/workflows/release-rollback-drill.yml
@@ -28,7 +28,7 @@ jobs:
     name: rollback-drill
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Run rollback drill (dry-run)
         shell: bash
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0e851ce6..553ab069 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -50,7 +50,7 @@ jobs:
           fi
           echo "tag=$tag" >> "$GITHUB_OUTPUT"
 
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           ref: ${{ steps.release_target.outputs.tag }}
 
@@ -130,13 +130,13 @@ jobs:
       RELEASE_TAG: ${{ needs.certification-matrix.outputs.target_tag }}
       RELEASE_PUBLICATION_MODE: ${{ needs.certification-matrix.outputs.publication_mode }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           ref: ${{ env.RELEASE_TAG }}
 
       - name: Checkout replay automation surfaces
         if: ${{ github.event_name == 'workflow_dispatch' }}
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           ref: develop
           path: .release-automation
@@ -459,7 +459,7 @@ jobs:
       matrix:
         os: [windows-latest, ubuntu-latest, macos-latest]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Download CLI artifacts
         uses: actions/download-artifact@v8
@@ -732,7 +732,7 @@ jobs:
       RELEASE_TAG: ${{ needs.release.outputs.target_tag }}
       RELEASE_PUBLICATION_MODE: ${{ needs.certification-matrix.outputs.publication_mode }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Download certification matrix artifact
         uses: actions/download-artifact@v8
diff --git a/.github/workflows/runbook-validation.yml b/.github/workflows/runbook-validation.yml
index ab57cb11..1f8c9aab 100644
--- a/.github/workflows/runbook-validation.yml
+++ b/.github/workflows/runbook-validation.yml
@@ -19,7 +19,7 @@ jobs:
     timeout-minutes: 3
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Run Runbook Core Phases
         id: host_runbook
diff --git a/.github/workflows/runtime-harness-package-rehearsal.yml b/.github/workflows/runtime-harness-package-rehearsal.yml
index bfee71c2..dc5832cb 100644
--- a/.github/workflows/runtime-harness-package-rehearsal.yml
+++ b/.github/workflows/runtime-harness-package-rehearsal.yml
@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Assert promotion contract alignment
         shell: pwsh
diff --git a/.github/workflows/security-intake.yml b/.github/workflows/security-intake.yml
index 7ce66bea..2a6ecec3 100644
--- a/.github/workflows/security-intake.yml
+++ b/.github/workflows/security-intake.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Run security intake gate
         env:
diff --git a/.github/workflows/selfhosted-readiness.yml b/.github/workflows/selfhosted-readiness.yml
index bbaa6173..30621c53 100644
--- a/.github/workflows/selfhosted-readiness.yml
+++ b/.github/workflows/selfhosted-readiness.yml
@@ -52,7 +52,7 @@ jobs:
       LV_IDLE_WAIT_SECONDS: ${{ vars.LV_IDLE_WAIT_SECONDS || '2' }}
       LV_IDLE_MAX_WAIT_SECONDS: ${{ vars.LV_IDLE_MAX_WAIT_SECONDS || '5' }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           repository: ${{ inputs.checkout_repository || github.repository }}
           ref: ${{ inputs.checkout_ref || github.sha }}
diff --git a/.github/workflows/smoke-on-label.yml b/.github/workflows/smoke-on-label.yml
index 9020e901..38d528c4 100644
--- a/.github/workflows/smoke-on-label.yml
+++ b/.github/workflows/smoke-on-label.yml
@@ -18,7 +18,7 @@ jobs:
     outputs:
       docs_only: ${{ steps.d.outputs.normalized }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - name: Detect docs-only change
         id: detect
         shell: pwsh
@@ -60,7 +60,7 @@ jobs:
       WATCH_CONSOLE: '1'
       LV_SUPPRESS_UI: '1'
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Prepare fixture copies (base/head)
         id: prep
diff --git a/.github/workflows/smoke.yml b/.github/workflows/smoke.yml
index 9496245c..3325c59b 100644
--- a/.github/workflows/smoke.yml
+++ b/.github/workflows/smoke.yml
@@ -52,7 +52,7 @@ jobs:
     runs-on: [self-hosted, Windows, X64, comparevi, capability-ingress]
     timeout-minutes: 3
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - name: Verify LVCompare and idle LabVIEW state
         shell: pwsh
         run: |
@@ -73,7 +73,7 @@ jobs:
       WATCH_CONSOLE: '1'
       LV_SUPPRESS_UI: '1'
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Validate canonical fixtures
         shell: pwsh
diff --git a/.github/workflows/standing-priority-hygiene.yml b/.github/workflows/standing-priority-hygiene.yml
index 57e50bf7..e9663634 100644
--- a/.github/workflows/standing-priority-hygiene.yml
+++ b/.github/workflows/standing-priority-hygiene.yml
@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Fetch parity refs
         shell: bash
diff --git a/.github/workflows/test-mock.yml b/.github/workflows/test-mock.yml
index 3ce4d035..2ad04be4 100644
--- a/.github/workflows/test-mock.yml
+++ b/.github/workflows/test-mock.yml
@@ -20,7 +20,7 @@ jobs:
   mock-cli:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Validate canonical fixtures
         shell: pwsh
diff --git a/.github/workflows/tools-parity.yml b/.github/workflows/tools-parity.yml
index 91f5a0ad..352a759e 100644
--- a/.github/workflows/tools-parity.yml
+++ b/.github/workflows/tools-parity.yml
@@ -49,7 +49,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index 6e950e41..223772aa 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -65,7 +65,7 @@ jobs:
     if: needs.smoke-gate.outputs.skip != 'true'
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
@@ -402,7 +402,7 @@ jobs:
       run_vi_history: ${{ steps.plan.outputs.run_vi_history }}
       vi_history_reason: ${{ steps.plan.outputs.vi_history_reason }}
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
@@ -482,7 +482,7 @@ jobs:
           $lines -join "`n" | Out-File -FilePath $env:GITHUB_STEP_SUMMARY -Append -Encoding utf8
         }
     - if: env.VALIDATE_SCOPE_RUN_FIXTURES == 'true'
-      uses: actions/checkout@v5
+      uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
@@ -608,7 +608,7 @@ jobs:
     env:
       PREPUSH_SKIP_LEGACY_FIXTURE_CHECKS: '1'
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
@@ -685,7 +685,7 @@ jobs:
     needs: lint
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
@@ -714,7 +714,7 @@ jobs:
     needs: lint
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
@@ -747,7 +747,7 @@ jobs:
     needs: lint
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
@@ -780,7 +780,7 @@ jobs:
     needs: lint
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
@@ -828,7 +828,7 @@ jobs:
     needs: lint
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
@@ -1038,7 +1038,7 @@ jobs:
     env:
       SESSION_INDEX_V2_CONTRACT_ENFORCE: ${{ vars.SESSION_INDEX_V2_CONTRACT_ENFORCE || 'false' }}
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
@@ -1104,7 +1104,7 @@ jobs:
       run:
         shell: pwsh
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
@@ -1199,7 +1199,7 @@ jobs:
       requested_history_scenario_set: ${{ steps.plan.outputs.requested_history_scenario_set }}
       downgraded_history_core: ${{ steps.plan.outputs.downgraded_history_core }}
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
@@ -1286,7 +1286,7 @@ jobs:
         }
 
     - if: needs.vi-history-scenarios-plan.outputs.execute_lanes == 'true'
-      uses: actions/checkout@v5
+      uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
@@ -1500,7 +1500,7 @@ jobs:
       required_labels: ${{ steps.plan.outputs.required_labels }}
       matching_runner_count: ${{ steps.plan.outputs.matching_runner_count }}
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
@@ -1617,7 +1617,7 @@ jobs:
           $lines -join "`n" | Out-File -FilePath $env:GITHUB_STEP_SUMMARY -Encoding utf8 -Append
         }
 
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
@@ -1869,7 +1869,7 @@ jobs:
       required_labels: ${{ steps.plan.outputs.required_labels }}
       matching_runner_count: ${{ steps.plan.outputs.matching_runner_count }}
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
@@ -1947,7 +1947,7 @@ jobs:
           )
           $lines -join "`n" | Out-File -FilePath $env:GITHUB_STEP_SUMMARY -Encoding utf8 -Append
         }
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
diff --git a/.github/workflows/validation-approval-helper.yml b/.github/workflows/validation-approval-helper.yml
index f2412335..16c67733 100644
--- a/.github/workflows/validation-approval-helper.yml
+++ b/.github/workflows/validation-approval-helper.yml
@@ -54,7 +54,7 @@ jobs:
   validation-approval-helper:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-node@v6
         with:
diff --git a/.github/workflows/verification.yml b/.github/workflows/verification.yml
index 6f9e3914..d1c168e9 100644
--- a/.github/workflows/verification.yml
+++ b/.github/workflows/verification.yml
@@ -21,7 +21,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Assert requirements-verification check contract
         shell: pwsh
diff --git a/.github/workflows/vi-compare-fork.yml b/.github/workflows/vi-compare-fork.yml
index 904a6242..444bce4a 100644
--- a/.github/workflows/vi-compare-fork.yml
+++ b/.github/workflows/vi-compare-fork.yml
@@ -27,7 +27,7 @@ jobs:
       COMPARE_TIMEOUT_SECONDS: 600
     steps:
       - name: Checkout base (parent repository)
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           ref: ${{ env.BASE_SHA }}
           fetch-depth: 0
diff --git a/.github/workflows/vi-compare-pr.yml b/.github/workflows/vi-compare-pr.yml
index 22ceef0c..25f0494f 100644
--- a/.github/workflows/vi-compare-pr.yml
+++ b/.github/workflows/vi-compare-pr.yml
@@ -23,7 +23,7 @@ jobs:
     if: github.event_name == 'workflow_dispatch'
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
       - name: Verify LVCompare and idle LabVIEW state
         shell: pwsh
         run: |
@@ -44,7 +44,7 @@ jobs:
       UNBLOCK_GUARD: '1'
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/vi-compare-refs.yml b/.github/workflows/vi-compare-refs.yml
index 64f94e4b..1f6c17b2 100644
--- a/.github/workflows/vi-compare-refs.yml
+++ b/.github/workflows/vi-compare-refs.yml
@@ -66,7 +66,7 @@ jobs:
       contents: read
     timeout-minutes: 5
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - name: Verify LVCompare and idle LabVIEW state
         shell: pwsh
         run: |
@@ -102,7 +102,7 @@ jobs:
     env:
       UNBLOCK_GUARD: '1'
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/vi-history-compare.yml b/.github/workflows/vi-history-compare.yml
index 3412d6ee..ed301241 100644
--- a/.github/workflows/vi-history-compare.yml
+++ b/.github/workflows/vi-history-compare.yml
@@ -67,7 +67,7 @@ jobs:
     runs-on: [self-hosted, Windows, X64, comparevi, capability-ingress]
     timeout-minutes: 5
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - name: Verify LVCompare installation
         shell: pwsh
         run: |
@@ -95,7 +95,7 @@ jobs:
       FAIL_ON_DIFF: ${{ inputs.fail_on_diff || 'false' }}
       MISSING_STRATEGY: ${{ inputs.missing_strategy || 'skip' }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/vi-staging-smoke.yml b/.github/workflows/vi-staging-smoke.yml
index 3a4084de..367e53c3 100644
--- a/.github/workflows/vi-staging-smoke.yml
+++ b/.github/workflows/vi-staging-smoke.yml
@@ -22,7 +22,7 @@ jobs:
     runs-on: [self-hosted, Windows, X64, comparevi, capability-ingress]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/weekly-scorecard.yml b/.github/workflows/weekly-scorecard.yml
index a78386ca..c9fe71d2 100644
--- a/.github/workflows/weekly-scorecard.yml
+++ b/.github/workflows/weekly-scorecard.yml
@@ -42,7 +42,7 @@ jobs:
       actions: read
       issues: write
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/windows-ni-proof-reusable.yml b/.github/workflows/windows-ni-proof-reusable.yml
index b00354a8..f3ec6669 100644
--- a/.github/workflows/windows-ni-proof-reusable.yml
+++ b/.github/workflows/windows-ni-proof-reusable.yml
@@ -59,7 +59,7 @@ jobs:
       NI_WINDOWS_IMAGE: ${{ inputs.image }}
       NI_WINDOWS_LABVIEW_PATH: ${{ inputs.labview_path }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
           ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
diff --git a/.github/workflows/workflows-lint.yml b/.github/workflows/workflows-lint.yml
index c4c60b5d..aad77663 100644
--- a/.github/workflows/workflows-lint.yml
+++ b/.github/workflows/workflows-lint.yml
@@ -9,7 +9,7 @@ jobs:
     env:
       ACTIONLINT_VERSION: ${{ vars.ACTIONLINT_VERSION || '1.7.8' }}
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
         ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}