diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 70a4d93..e590a6c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: windows-latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       # ACT is strong-named, so a stub assembly can't produce a UI
       # DLL that loads at runtime. Fetch the real ACTv3.zip from
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 02d1f1f..3e52f3e 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -26,7 +26,7 @@ jobs:
     timeout-minutes: 30
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       # The UI assembly references ACT.exe, so we need to fetch ACT
       # for CodeQL's autobuild step to succeed across the whole sln.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 21a26c1..a6a3e9a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -24,7 +24,7 @@ jobs:
     runs-on: windows-latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           # Full history so we can diff against the previous tag.
           fetch-depth: 0