diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 92ecda9082..2e23ee7bae 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -64,10 +64,10 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout with shallow clone
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         if: ${{ !contains(matrix.os.coverage, 'coverage') }}
       - name: Checkout without shallow clone
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         if: ${{ contains(matrix.os.coverage, 'coverage') }}
         with:
           # Disabling shallow clone is recommended for improving relevancy of SonarCloud reporting
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index cfd97824b6..11e71879a1 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -41,7 +41,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
diff --git a/.github/workflows/dependency-review-pr.yml b/.github/workflows/dependency-review-pr.yml
index f068721cc5..647b79fcbb 100644
--- a/.github/workflows/dependency-review-pr.yml
+++ b/.github/workflows/dependency-review-pr.yml
@@ -14,6 +14,6 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: 'Checkout Repository'
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: 'Dependency Review'
         uses: actions/dependency-review-action@v5
diff --git a/.github/workflows/generate-demo-preview.yml b/.github/workflows/generate-demo-preview.yml
index dff6628ef2..776d2c709b 100644
--- a/.github/workflows/generate-demo-preview.yml
+++ b/.github/workflows/generate-demo-preview.yml
@@ -29,7 +29,7 @@ jobs:
     permissions:
       pull-requests: write # surge-preview: PR comments
     steps:
-      - uses: actions/checkout@v6 # access to the local action
+      - uses: actions/checkout@v7 # access to the local action
       - name: surge preview
         uses: ./.github/actions/custom-surge-preview
         with:
diff --git a/.github/workflows/generate-documentation.yml b/.github/workflows/generate-documentation.yml
index f0100197a2..008220dc95 100644
--- a/.github/workflows/generate-documentation.yml
+++ b/.github/workflows/generate-documentation.yml
@@ -39,7 +39,7 @@ jobs:
     permissions:
       pull-requests: write # surge-preview: PR comments
     steps:
-      - uses: actions/checkout@v6 # access to the local action
+      - uses: actions/checkout@v7 # access to the local action
       - name: surge preview
         uses: ./.github/actions/custom-surge-preview
         with:
@@ -53,7 +53,7 @@ jobs:
     if: (github.event_name == 'push' || github.event_name == 'workflow_dispatch') &&  github.event.ref == 'refs/heads/master'
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Build Setup
         uses: ./.github/actions/build-setup
       - name: Build docs
diff --git a/.github/workflows/notify-new-version-available-on-npm.yml b/.github/workflows/notify-new-version-available-on-npm.yml
index 3705a5b10e..1b18e5c3b1 100644
--- a/.github/workflows/notify-new-version-available-on-npm.yml
+++ b/.github/workflows/notify-new-version-available-on-npm.yml
@@ -21,7 +21,7 @@ jobs:
           - bpmn-visualization-R
     steps:
       # Need to checkout to access to the internal action
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Notify that a new bpmn-visualization version is available
         uses: ./.github/actions/notify-PA-repo-of-new-version
         with:
diff --git a/.github/workflows/publish-npm.yml b/.github/workflows/publish-npm.yml
index 923701a2a0..c871f60d30 100644
--- a/.github/workflows/publish-npm.yml
+++ b/.github/workflows/publish-npm.yml
@@ -13,7 +13,7 @@ jobs:
       - name: Set VERSION
         shell: bash
         run: echo "VERSION=${GITHUB_REF#refs/tags/v*}" >> $GITHUB_ENV
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Build Setup
         uses: ./.github/actions/build-setup
         with:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index afa2c8288f..597d5a6ca0 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -14,7 +14,7 @@ jobs:
       - run: |
           echo "New version type: ${{ inputs.type }}"
       - name: Setup checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           # Use a PAT to ensure workflow run are triggered after git push
           token: ${{ secrets.GH_RELEASE_TOKEN }}
diff --git a/.github/workflows/test-e2e.yml b/.github/workflows/test-e2e.yml
index d78e3912ea..e10f13ebd2 100644
--- a/.github/workflows/test-e2e.yml
+++ b/.github/workflows/test-e2e.yml
@@ -67,7 +67,7 @@ jobs:
             browser: chrome
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Free disk space on Ubuntu runner
         if: runner.os == 'Linux'
         uses: ./.github/actions/free-runner-disk-space-ubuntu
diff --git a/.github/workflows/test-npm-package.yml b/.github/workflows/test-npm-package.yml
index 811693c18a..1c44e2c947 100644
--- a/.github/workflows/test-npm-package.yml
+++ b/.github/workflows/test-npm-package.yml
@@ -46,7 +46,7 @@ jobs:
       test-bundles-browser: chromium
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       # START temporary workaround
       # Browser download failure with Node 24. See https://github.com/microsoft/playwright/issues/41185 and https://github.com/microsoft/playwright-cli/issues/419#issuecomment-4646958277 (that mentions that it should work with Node 22)
       #      - name: Build Setup
diff --git a/.github/workflows/test-performance.yml b/.github/workflows/test-performance.yml
index 39e134ecbf..ca52026a7b 100644
--- a/.github/workflows/test-performance.yml
+++ b/.github/workflows/test-performance.yml
@@ -37,7 +37,7 @@ jobs:
       browser: chromium
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Build Setup
         uses: ./.github/actions/build-setup
       - name: Install ${{env.browser}}
diff --git a/.github/workflows/upload-demo-archive-and-trigger-examples-repository-update.yml b/.github/workflows/upload-demo-archive-and-trigger-examples-repository-update.yml
index 775ed89949..040b0c91b3 100644
--- a/.github/workflows/upload-demo-archive-and-trigger-examples-repository-update.yml
+++ b/.github/workflows/upload-demo-archive-and-trigger-examples-repository-update.yml
@@ -15,7 +15,7 @@ jobs:
     env:
       VERSION: ${{ github.event.client_payload.version || inputs.version }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: v${{ env.VERSION }}
       - name: Build Setup