diff --git a/.github/workflows/code-quality.yml b/.github/workflows/code-quality.yml
index b527001b..e3352c74 100644
--- a/.github/workflows/code-quality.yml
+++ b/.github/workflows/code-quality.yml
@@ -16,7 +16,7 @@ jobs:
       DATABASE_URL: "sqlite:///:memory:"
       BYPASS_AUTH_TOKEN_VERIFICATION: "1"
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.head_ref }}
       - uses: actions/setup-python@v6
@@ -263,7 +263,7 @@ jobs:
     name: Code Complexity
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: "3.12"
diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml
index 6bf101c2..527892d3 100644
--- a/.github/workflows/docker-build.yml
+++ b/.github/workflows/docker-build.yml
@@ -14,7 +14,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Build Docker image
         run: docker build -t flight-blender:test .
       - name: Run Trivy vulnerability scanner
diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index a1341fc0..24872e80 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -24,7 +24,7 @@ jobs:
   build-and-publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
       - name: Log in to GitHub Container Registry
diff --git a/.github/workflows/interuss-qualification.yml b/.github/workflows/interuss-qualification.yml
index a6f6f4e2..45446d33 100644
--- a/.github/workflows/interuss-qualification.yml
+++ b/.github/workflows/interuss-qualification.yml
@@ -38,7 +38,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Cache interuss/monitoring clone
         uses: actions/cache@v5
diff --git a/.github/workflows/iso-audit-report.yml b/.github/workflows/iso-audit-report.yml
index e8c7ff07..a65e5730 100644
--- a/.github/workflows/iso-audit-report.yml
+++ b/.github/workflows/iso-audit-report.yml
@@ -21,7 +21,7 @@ jobs:
     name: Generate ISO Audit Report
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/linting.yml b/.github/workflows/linting.yml
index 33d96da8..4131f23b 100644
--- a/.github/workflows/linting.yml
+++ b/.github/workflows/linting.yml
@@ -13,7 +13,7 @@ jobs:
   ruff:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: "3.12"
@@ -74,7 +74,7 @@ jobs:
   codespell:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: "3.12"
@@ -131,7 +131,7 @@ jobs:
       DATABASE_URL: "sqlite:///:memory:"
       BYPASS_AUTH_TOKEN_VERIFICATION: "1"
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: "3.12"
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 5720ecdd..fd965431 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -14,7 +14,7 @@ jobs:
   bandit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: "3.12"
@@ -95,7 +95,7 @@ jobs:
   pip-audit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: "3.12"
@@ -141,7 +141,7 @@ jobs:
   gitleaks:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - name: Install gitleaks
@@ -184,7 +184,7 @@ jobs:
   license-check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: "3.12"
diff --git a/.github/workflows/verification.yml b/.github/workflows/verification.yml
index 9c8c2be3..8aa1aed4 100644
--- a/.github/workflows/verification.yml
+++ b/.github/workflows/verification.yml
@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: Checkout flight-blender
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       # Build from the current branch so the test environment exercises this
       # exact code, not the published Docker Hub image.
@@ -41,7 +41,7 @@ jobs:
 
       # Check out the verification toolkit next to our repo.
       - name: Checkout openutm/verification
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: openutm/verification
           path: verification
diff --git a/badges/coverage.svg b/badges/coverage.svg
index 5a655df3..7c83cb1e 100644
--- a/badges/coverage.svg
+++ b/badges/coverage.svg
@@ -13,8 +13,8 @@
   <rect width="120" height="20" fill="url(#s)"/>
 </g>
 <g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="110">
-  <text aria-hidden="true" x="340" y="150" fill="#010101" fill-opacity=".3" transform="scale(.1)" textLength="580">coverage</text>
-  <text x="340" y="140" transform="scale(.1)" textLength="580">coverage</text>
+  <text aria-hidden="true" x="340" y="150" fill="#010101" fill-opacity=".3" transform="scale(.1)" textLength="560">coverage</text>
+  <text x="340" y="140" transform="scale(.1)" textLength="560">coverage</text>
   <text aria-hidden="true" x="940" y="150" fill="#010101" fill-opacity=".3" transform="scale(.1)" textLength="400">72.2%</text>
   <text x="940" y="140" transform="scale(.1)" textLength="400">72.2%</text>
 </g>