diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4d013bc..544f9a4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,7 +16,7 @@ jobs:
   validate:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: fluxcd/flux2/action@main
       - name: Install kubeconform (kustomize ships with the runner)
         run: |
@@ -31,7 +31,7 @@ jobs:
     needs: validate
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: helm/kind-action@v1
       - uses: fluxcd/flux2/action@main
       - run: flux install --components-extra=image-reflector-controller,image-automation-controller
diff --git a/.github/workflows/links.yml b/.github/workflows/links.yml
index 7c8bfe1..b407ea1 100644
--- a/.github/workflows/links.yml
+++ b/.github/workflows/links.yml
@@ -11,7 +11,7 @@ jobs:
   links:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       # linkedin.com answers bots with HTTP 999; it is excluded, not ignored silently.
       - uses: lycheeverse/lychee-action@v2
         with: