diff --git a/.github/workflows/release-drift.yml b/.github/workflows/release-drift.yml
index 5d5b84a..963d208 100644
--- a/.github/workflows/release-drift.yml
+++ b/.github/workflows/release-drift.yml
@@ -17,7 +17,7 @@ jobs:
   drift:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0 # full history + tags so `git describe` works
       - name: Fail if src/ changed since the latest release tag