diff --git a/.github/workflows/pythonapp.yml b/.github/workflows/pythonapp.yml
index 41764e1..a645966 100644
--- a/.github/workflows/pythonapp.yml
+++ b/.github/workflows/pythonapp.yml
@@ -12,7 +12,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
     - uses: astral-sh/setup-uv@v6
     - run: uv run ruff format --check .
     - run: uv run ruff check .
@@ -32,7 +32,7 @@ jobs:
             markdown: '3.2.*'
     name: test (py${{ matrix.python-version }}${{ matrix.markdown != 'locked' && format(', markdown {0}', matrix.markdown) || '' }})
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
     - uses: astral-sh/setup-uv@v6
       with:
         python-version: ${{ matrix.python-version }}
diff --git a/.github/workflows/pythonpublish.yml b/.github/workflows/pythonpublish.yml
index e0f4e05..72fd737 100644
--- a/.github/workflows/pythonpublish.yml
+++ b/.github/workflows/pythonpublish.yml
@@ -14,7 +14,7 @@ jobs:
     permissions:
       id-token: write  # PyPI Trusted Publishing
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         fetch-depth: 0  # setuptools-scm derives the version from tags
     - uses: astral-sh/setup-uv@v6