diff --git a/.github/workflows/bootstrap.yml b/.github/workflows/bootstrap.yml
index 580a07c..221c7e2 100644
--- a/.github/workflows/bootstrap.yml
+++ b/.github/workflows/bootstrap.yml
@@ -36,7 +36,7 @@ jobs:
     runs-on: macos-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Environment info
         run: |
diff --git a/.github/workflows/brewfile.yml b/.github/workflows/brewfile.yml
index f56b40e..8b2254a 100644
--- a/.github/workflows/brewfile.yml
+++ b/.github/workflows/brewfile.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: macos-latest
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Show brew & Brewfile info
         run: |
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index cc717cd..0731e16 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -12,7 +12,7 @@ jobs:
   zsh-syntax:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Install zsh
         run: sudo apt-get update && sudo apt-get install -y zsh
       - name: Syntax check scripts
@@ -26,7 +26,7 @@ jobs:
   actionlint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: reviewdog/action-actionlint@v1
         with:
           reporter: github-check
@@ -35,7 +35,7 @@ jobs:
   gitleaks:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - uses: gitleaks/gitleaks-action@v2
diff --git a/.github/workflows/release-watch.yml b/.github/workflows/release-watch.yml
index 072c3ac..d5e5126 100644
--- a/.github/workflows/release-watch.yml
+++ b/.github/workflows/release-watch.yml
@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 20
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           # Full history so the commit-state step can `git pull --rebase`
           # if main moved while the workflow was running.