diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4462a929..afbc6a3d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -40,7 +40,7 @@ jobs:
       GOODQ_REQUIRE_WSL_AUDIO: "0"
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Prepare CI data root
         shell: pwsh
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 80df7d4d..4ff0e157 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -27,7 +27,7 @@ jobs:
           - python
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index aa5e2eb3..409f8366 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -21,6 +21,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
       - name: Dependency Review
         uses: actions/dependency-review-action@v5
diff --git a/.github/workflows/doc-drift-lint.yml b/.github/workflows/doc-drift-lint.yml
index f22a4d59..ff81995e 100644
--- a/.github/workflows/doc-drift-lint.yml
+++ b/.github/workflows/doc-drift-lint.yml
@@ -27,10 +27,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Setup Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: "3.11"