diff --git a/.github/workflows/agent-review.yml b/.github/workflows/agent-review.yml
index 77f82d1..882ac6a 100644
--- a/.github/workflows/agent-review.yml
+++ b/.github/workflows/agent-review.yml
@@ -12,7 +12,7 @@ jobs:
   governance-smoke:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Verify agent guidance exists
         run: |
           set -euo pipefail
diff --git a/.github/workflows/pr-contract.yml b/.github/workflows/pr-contract.yml
index a25b4bc..69619cb 100644
--- a/.github/workflows/pr-contract.yml
+++ b/.github/workflows/pr-contract.yml
@@ -12,7 +12,7 @@ jobs:
   contract:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0