diff --git a/.github/workflows/build-release.yml b/.github/workflows/build-release.yml
index b3abdca..579a15e 100644
--- a/.github/workflows/build-release.yml
+++ b/.github/workflows/build-release.yml
@@ -25,7 +25,7 @@ jobs:
       APP_ID: io.github.i4ctime.protonshift
       RUNTIME_VERSION: "24.08"
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       # Resolve the tag the bundle is named after: the pushed tag on tag runs,
       # or "v<pyproject version>-dev" on workflow_dispatch dry-runs (where no
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a508987..bcef5cf 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -30,7 +30,7 @@ jobs:
       matrix:
         python-version: ["3.11", "3.12"]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-python@v6
         with:
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 1d58b7a..f2d2f83 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -22,7 +22,7 @@ jobs:
         language: [python]
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4