diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index aa807cd27..8fada12ae 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -3,7 +3,7 @@ updates:
   - package-ecosystem: github-actions
     directory: /
     schedule:
-      interval: weekly
+      interval: "quarterly"
     commit-message:
       prefix: "[gh-actions]"
       include: scope
diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
index fe6d92d04..9c93a0897 100644
--- a/.github/workflows/claude.yml
+++ b/.github/workflows/claude.yml
@@ -25,7 +25,7 @@ jobs:
       id-token: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
 
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index e2d0e80df..ceae4d879 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index fff16470b..1a21714e2 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -17,7 +17,7 @@ jobs:
           #- 3.11
     steps:
     - name: Check out repository
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         # Fetch all commits so that versioneer will return something compatible
         # with semantic-version
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 44a404f33..864232f22 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Set up environment
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: 0
     - name: Set up Python
@@ -29,6 +29,6 @@ jobs:
   reuse:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - name: Check REUSE compliance
       uses: fsfe/reuse-action@v6
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5a4a1a3b8..820a4a940 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -13,7 +13,7 @@ jobs:
     if: "!contains(github.event.head_commit.message, 'ci skip') && !contains(github.event.head_commit.message, 'skip ci')"
     steps:
       - name: Checkout source
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/run-tests.yml b/.github/workflows/run-tests.yml
index d80103feb..a03fe759e 100644
--- a/.github/workflows/run-tests.yml
+++ b/.github/workflows/run-tests.yml
@@ -72,7 +72,7 @@ jobs:
 
     steps:
     - name: Set up environment
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         # Fetch all commits so that versioneer will return something compatible
         # with semantic-version
diff --git a/.github/workflows/typing.yml b/.github/workflows/typing.yml
index c02787d41..3025111d9 100644
--- a/.github/workflows/typing.yml
+++ b/.github/workflows/typing.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/update-year.yml b/.github/workflows/update-year.yml
index 2006d7032..86bf21429 100644
--- a/.github/workflows/update-year.yml
+++ b/.github/workflows/update-year.yml
@@ -13,7 +13,7 @@ jobs:
   run:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - uses: FantasticFiasco/action-update-license-year@v3