diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 676de9b..6fe10b0 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -13,7 +13,7 @@ jobs:
     outputs:
       version: ${{ steps.resolve.outputs.version }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: main
       - id: resolve
@@ -34,7 +34,7 @@ jobs:
     outputs:
       version: ${{ needs.setup.outputs.version }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           ref: main
@@ -54,7 +54,7 @@ jobs:
     outputs:
       version: ${{ needs.tag.outputs.version }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Create GitHub release
         env:
@@ -78,7 +78,7 @@ jobs:
             asset: scip-go-darwin-arm64
     runs-on: ${{ matrix.runner }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: v${{ needs.create-release.outputs.version }}
       - uses: DeterminateSystems/nix-installer-action@v22
@@ -114,7 +114,7 @@ jobs:
             arch: arm64
     runs-on: ${{ matrix.runner }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: v${{ needs.create-release.outputs.version }}
       - uses: DeterminateSystems/nix-installer-action@v22
@@ -143,7 +143,7 @@ jobs:
     permissions:
       packages: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: v${{ needs.create-release.outputs.version }}
 
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index f6402a5..c2f1c0e 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -13,7 +13,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: DeterminateSystems/nix-installer-action@v22
         with:
           summarize: false
@@ -34,7 +34,7 @@ jobs:
           - runner: ubuntu-24.04-arm
     runs-on: ${{ matrix.runner }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: DeterminateSystems/nix-installer-action@v22
         with:
           summarize: false
@@ -117,7 +117,7 @@ jobs:
           echo "$GITHUB_WORKSPACE/scip-go-bin" >> "$GITHUB_PATH"
 
       - name: Checkout target repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: ${{ matrix.repo }}
           ref: ${{ matrix.ref }}
@@ -174,7 +174,7 @@ jobs:
   fingerprint-sync:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-go@v6
         with:
           go-version: stable
diff --git a/.github/workflows/update-vendor-hash.yaml b/.github/workflows/update-vendor-hash.yaml
index 35d2d2a..8b4cbdc 100644
--- a/.github/workflows/update-vendor-hash.yaml
+++ b/.github/workflows/update-vendor-hash.yaml
@@ -43,7 +43,7 @@ jobs:
           app-id: ${{ vars.RENOVATE_FIX_APP_ID }}
           private-key: ${{ secrets.RENOVATE_FIX_APP_PRIVATE_KEY }}
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.head.ref }}
           token: ${{ steps.app-token.outputs.token }}