diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2af69cd..167ea86 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,7 +20,7 @@ jobs:
   check:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - uses: pnpm/action-setup@v4
         with:
diff --git a/.github/workflows/notify.yml b/.github/workflows/notify.yml
index 71c4d38..79adc8a 100644
--- a/.github/workflows/notify.yml
+++ b/.github/workflows/notify.yml
@@ -64,7 +64,7 @@ jobs:
   publish:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           ref: main
 
diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index f2e4caf..d47f07c 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -31,7 +31,7 @@ jobs:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       # Validate before publishing, with the client's own parser. A malformed envelope does not degrade
       # gracefully — every install ignores the entire file and shows nothing, silently.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0a67ad7..4d4379b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -34,7 +34,7 @@ jobs:
     runs-on: ${{ matrix.os }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - uses: pnpm/action-setup@v4
         with:
@@ -209,7 +209,7 @@ jobs:
       # To dispatch the Pages deploy. See the note on the last step.
       actions: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           ref: main