diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index 0c462ee..a8e587b 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -32,7 +32,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v7
     # Building cargo-audit from source costs minutes; cache the binary.
     # Bump the key suffix to force a reinstall on a newer release.
     - name: Cache cargo-audit
diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index c58a521..c2ce820 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v7
     - name: Build (debug)
       run: cargo build --verbose
     - name: Run tests
@@ -35,7 +35,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v7
     - name: Read rust-version from Cargo.toml
       id: msrv
       run: |