diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index 8dc9cfa9..16361784 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -26,7 +26,7 @@ jobs:
     steps:
       # ── 1. Checkout (needed for path context so .dockerignore is respected) ──
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       # ── 2. Multi-platform support ───────────────────────────────────────────
       - name: Set up QEMU
diff --git a/.github/workflows/docker-readme-validation.yml b/.github/workflows/docker-readme-validation.yml
index 08e1ab15..82a8a806 100644
--- a/.github/workflows/docker-readme-validation.yml
+++ b/.github/workflows/docker-readme-validation.yml
@@ -23,7 +23,7 @@ jobs:
     steps:
       # ── 1. Clone ─────────────────────────────────────────────────────────────
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       # ── 2. setup.sh ──────────────────────────────────────────────────────────
       - name: Run setup.sh (new-user step 1)
diff --git a/.github/workflows/e2e-tests.yml b/.github/workflows/e2e-tests.yml
index 070e657f..c0e7cdb3 100644
--- a/.github/workflows/e2e-tests.yml
+++ b/.github/workflows/e2e-tests.yml
@@ -53,7 +53,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
diff --git a/.github/workflows/pr-validation.yml b/.github/workflows/pr-validation.yml
index e70191ec..16c292a9 100644
--- a/.github/workflows/pr-validation.yml
+++ b/.github/workflows/pr-validation.yml
@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
diff --git a/.github/workflows/release-verification.yml b/.github/workflows/release-verification.yml
index 7b33ce8b..8268e704 100644
--- a/.github/workflows/release-verification.yml
+++ b/.github/workflows/release-verification.yml
@@ -47,7 +47,7 @@ jobs:
           echo "version=$version" >> "$GITHUB_OUTPUT"
 
       - name: Checkout release tag
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ steps.tag.outputs.tag }}
 
@@ -138,7 +138,7 @@ jobs:
           echo "version=$version" >> "$GITHUB_OUTPUT"
 
       - name: Checkout release tag
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ steps.tag.outputs.tag }}