diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 2bbe25a..0c7be80 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -36,7 +36,7 @@ jobs:
           - macos-latest
     runs-on: ${{ matrix.os }}
     steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
 
     - name: Prework
       run: |
diff --git a/cpp/.github/workflows/build.yaml.jinja b/cpp/.github/workflows/build.yaml.jinja
index 676875b..bfaf341 100644
--- a/cpp/.github/workflows/build.yaml.jinja
+++ b/cpp/.github/workflows/build.yaml.jinja
@@ -59,7 +59,7 @@ jobs:
             cibuildwheel: "cp312"
 
     steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
 
     - uses: actions-ext/python/setup@main
       with:
diff --git a/cpp/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja b/cpp/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja
index 1c661f9..e548b75 100644
--- a/cpp/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja	
+++ b/cpp/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja	
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     if: {% raw %}${{ github.event.workflow_run.conclusion == 'success' || github.event_name == 'workflow_dispatch' }}{% endraw %}
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
       - uses: actions-ext/python/setup@main
 
       - name: Download dist from build
diff --git a/cpp/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja b/cpp/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja
index 4a730f3..0ee2614 100644
--- a/cpp/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja	
+++ b/cpp/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja	
@@ -20,7 +20,7 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
       - run: cp README.md docs/wiki/Home.md
       - uses: Andrew-Chen-Wang/github-wiki-action@64efa0a9436db17670a2259e0ac249d6f08bb352 # v5
         with:
diff --git a/cppjswasm/.github/workflows/build.yaml.jinja b/cppjswasm/.github/workflows/build.yaml.jinja
index 8eb53ca..9a9b1de 100644
--- a/cppjswasm/.github/workflows/build.yaml.jinja
+++ b/cppjswasm/.github/workflows/build.yaml.jinja
@@ -35,7 +35,7 @@ jobs:
         node-version: [22.x]
 
     steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
 
     - uses: actions-ext/python/setup@main
       with:
diff --git a/cppjswasm/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja b/cppjswasm/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja
index 20fcb91..a2588c2 100644
--- a/cppjswasm/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja	
+++ b/cppjswasm/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja	
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     if: {% raw %}${{ github.event.workflow_run.conclusion == 'success' || github.event_name == 'workflow_dispatch' }}{% endraw %}
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
       - uses: actions-ext/python/setup@main
 
       - name: Download dist from build
diff --git a/cppjswasm/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja b/cppjswasm/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja
index 4a730f3..0ee2614 100644
--- a/cppjswasm/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja	
+++ b/cppjswasm/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja	
@@ -20,7 +20,7 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
       - run: cp README.md docs/wiki/Home.md
       - uses: Andrew-Chen-Wang/github-wiki-action@64efa0a9436db17670a2259e0ac249d6f08bb352 # v5
         with:
diff --git a/js/.github/workflows/build.yaml.jinja b/js/.github/workflows/build.yaml.jinja
index 7319e28..5632077 100644
--- a/js/.github/workflows/build.yaml.jinja
+++ b/js/.github/workflows/build.yaml.jinja
@@ -34,7 +34,7 @@ jobs:
         node-version: [22.x]
 
     steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
 
     - uses: actions-ext/python/setup@main
       with:
diff --git a/js/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja b/js/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja
index 063649a..290be78 100644
--- a/js/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja	
+++ b/js/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja	
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     if: {% raw %}${{ github.event.workflow_run.conclusion == 'success' || github.event_name == 'workflow_dispatch' }}{% endraw %}
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
       - uses: actions-ext/python/setup@main
 
       - name: Download dist from build
diff --git a/js/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja b/js/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja
index 4a730f3..0ee2614 100644
--- a/js/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja	
+++ b/js/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja	
@@ -20,7 +20,7 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
       - run: cp README.md docs/wiki/Home.md
       - uses: Andrew-Chen-Wang/github-wiki-action@64efa0a9436db17670a2259e0ac249d6f08bb352 # v5
         with:
diff --git a/jupyter/.github/workflows/build.yaml.jinja b/jupyter/.github/workflows/build.yaml.jinja
index 68e4724..6c80a44 100644
--- a/jupyter/.github/workflows/build.yaml.jinja
+++ b/jupyter/.github/workflows/build.yaml.jinja
@@ -34,7 +34,7 @@ jobs:
         node-version: [22.x]
 
     steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
 
     - uses: actions-ext/python/setup@main
       with:
diff --git a/jupyter/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja b/jupyter/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja
index 063649a..290be78 100644
--- a/jupyter/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja	
+++ b/jupyter/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja	
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     if: {% raw %}${{ github.event.workflow_run.conclusion == 'success' || github.event_name == 'workflow_dispatch' }}{% endraw %}
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
       - uses: actions-ext/python/setup@main
 
       - name: Download dist from build
diff --git a/jupyter/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja b/jupyter/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja
index 4a730f3..0ee2614 100644
--- a/jupyter/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja	
+++ b/jupyter/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja	
@@ -20,7 +20,7 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
       - run: cp README.md docs/wiki/Home.md
       - uses: Andrew-Chen-Wang/github-wiki-action@64efa0a9436db17670a2259e0ac249d6f08bb352 # v5
         with:
diff --git a/python/.github/workflows/build.yaml.jinja b/python/.github/workflows/build.yaml.jinja
index 9941fa3..cae7dab 100644
--- a/python/.github/workflows/build.yaml.jinja
+++ b/python/.github/workflows/build.yaml.jinja
@@ -33,7 +33,7 @@ jobs:
         python-version: ["{{ python_version_primary }}"]
 
     steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
 
     - uses: actions-ext/python/setup@main
       with:
diff --git a/python/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja b/python/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja
index 063649a..290be78 100644
--- a/python/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja	
+++ b/python/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja	
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     if: {% raw %}${{ github.event.workflow_run.conclusion == 'success' || github.event_name == 'workflow_dispatch' }}{% endraw %}
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
       - uses: actions-ext/python/setup@main
 
       - name: Download dist from build
diff --git a/python/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja b/python/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja
index 4a730f3..0ee2614 100644
--- a/python/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja	
+++ b/python/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja	
@@ -20,7 +20,7 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
       - run: cp README.md docs/wiki/Home.md
       - uses: Andrew-Chen-Wang/github-wiki-action@64efa0a9436db17670a2259e0ac249d6f08bb352 # v5
         with:
diff --git a/rust/.github/workflows/build.yaml.jinja b/rust/.github/workflows/build.yaml.jinja
index 3f24a59..9f75f2c 100644
--- a/rust/.github/workflows/build.yaml.jinja
+++ b/rust/.github/workflows/build.yaml.jinja
@@ -33,7 +33,7 @@ jobs:
         python-version: ["{{ python_version_primary }}"]
 
     steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
 
     - uses: actions-ext/python/setup@main
       with:
diff --git a/rust/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja b/rust/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja
index 063649a..290be78 100644
--- a/rust/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja	
+++ b/rust/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja	
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     if: {% raw %}${{ github.event.workflow_run.conclusion == 'success' || github.event_name == 'workflow_dispatch' }}{% endraw %}
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
       - uses: actions-ext/python/setup@main
 
       - name: Download dist from build
diff --git a/rust/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja b/rust/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja
index 4a730f3..0ee2614 100644
--- a/rust/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja	
+++ b/rust/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja	
@@ -20,7 +20,7 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
       - run: cp README.md docs/wiki/Home.md
       - uses: Andrew-Chen-Wang/github-wiki-action@64efa0a9436db17670a2259e0ac249d6f08bb352 # v5
         with:
diff --git a/rustjswasm/.github/workflows/build.yaml.jinja b/rustjswasm/.github/workflows/build.yaml.jinja
index 05ca72d..47f7ada 100644
--- a/rustjswasm/.github/workflows/build.yaml.jinja
+++ b/rustjswasm/.github/workflows/build.yaml.jinja
@@ -35,7 +35,7 @@ jobs:
         node-version: [22.x]
 
     steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
 
     - uses: actions-ext/python/setup@main
       with:
diff --git a/rustjswasm/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja b/rustjswasm/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja
index af48744..ba43515 100644
--- a/rustjswasm/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja	
+++ b/rustjswasm/.github/workflows/{% if add_docs %}docs.yaml{% endif %}.jinja	
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     if: {% raw %}${{ github.event.workflow_run.conclusion == 'success' || github.event_name == 'workflow_dispatch' }}{% endraw %}
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
       - uses: actions-ext/python/setup@main
 
       - name: Download dist from build
diff --git a/rustjswasm/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja b/rustjswasm/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja
index 4a730f3..0ee2614 100644
--- a/rustjswasm/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja	
+++ b/rustjswasm/.github/workflows/{% if add_wiki %}wiki.yaml{% endif %}.jinja	
@@ -20,7 +20,7 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
       - run: cp README.md docs/wiki/Home.md
       - uses: Andrew-Chen-Wang/github-wiki-action@64efa0a9436db17670a2259e0ac249d6f08bb352 # v5
         with: