diff --git a/.gitea/workflows/ansible-linters.yml b/.gitea/workflows/ansible-linters.yml
index b81e47b..57cff81 100644
--- a/.gitea/workflows/ansible-linters.yml
+++ b/.gitea/workflows/ansible-linters.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on:
     - ubuntu-latest
     steps:
-    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: Run ansible-lint
       uses: ansible/ansible-lint@665d9e07a1943254d2910faffc106adaf7ea7294 # v26.8.0
       with:
diff --git a/.gitea/workflows/markdown-linters.yml b/.gitea/workflows/markdown-linters.yml
index b35a8eb..6c1bc78 100644
--- a/.gitea/workflows/markdown-linters.yml
+++ b/.gitea/workflows/markdown-linters.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on:
     - ubuntu-latest
     steps:
-    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - uses: DavidAnson/markdownlint-cli2-action@ded1f9488f68a970bc66ea5619e13e9b52e601cd # v23.2.0
       with:
         globs: '**/*.md'
diff --git a/.gitea/workflows/molecule.yml b/.gitea/workflows/molecule.yml
index d0b3eeb..f33b4b2 100644
--- a/.gitea/workflows/molecule.yml
+++ b/.gitea/workflows/molecule.yml
@@ -17,7 +17,7 @@ jobs:
     steps:
     # The scenario includes the role by its name, so the directory must be named like the role and not like the
     # repository. Its parent is used as roles path.
-    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       with:
         path: sudo
     - name: Install molecule