diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 914c0b0..e972e6a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,7 +16,7 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           # Without the submodules the build fails loudly, by design, rather than
           # publishing empty sections — so there is no point running without them.
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index e6ccfed..b930e34 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -23,7 +23,7 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           # Without the submodules the build fails loudly, by design, rather than
           # publishing empty sections.