diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index bc77761..90078f9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -32,7 +32,7 @@ jobs:
       run:
         shell: bash
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       # rustup reads rust-toolchain.toml (channel 1.95 + rustfmt/clippy) and
       # installs the pinned toolchain if the runner doesn't have it yet.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1e1072f..0c6b95c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -39,7 +39,7 @@ jobs:
     outputs:
       version: ${{ steps.v.outputs.version }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - id: v
         name: Tag must match Cargo.toml version
         run: |
@@ -76,7 +76,7 @@ jobs:
     # on windows-latest / macos-14, which carry their own MSVC / Xcode toolchains.
     container: ${{ matrix.container }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Materialize Rust toolchain
         run: |
@@ -129,7 +129,7 @@ jobs:
     # GitHub auto-creates it (unprotected) on first run.
     environment: release
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Materialize Rust toolchain
         run: rustup show