diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2ec0080..d01c240 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -28,7 +28,7 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Go
         uses: actions/setup-go@v6
diff --git a/.github/workflows/macos-companion.yml b/.github/workflows/macos-companion.yml
index 4118752..79e5f47 100644
--- a/.github/workflows/macos-companion.yml
+++ b/.github/workflows/macos-companion.yml
@@ -150,13 +150,13 @@ jobs:
 
     steps:
       - name: Check out trusted scripts
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: main
           path: trusted
 
       - name: Check out pull request branch
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: ${{ needs.plan.outputs.push_repo }}
           ref: ${{ needs.plan.outputs.push_branch }}
@@ -301,13 +301,13 @@ jobs:
 
     steps:
       - name: Check out trusted scripts
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: main
           path: trusted
 
       - name: Check out pull request branch
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: ${{ needs.plan.outputs.push_repo }}
           ref: ${{ needs.plan.outputs.push_branch }}
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 659c6b3..925be36 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -50,7 +50,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ needs.release-please.outputs.tag_name }}