diff --git a/.github/workflows/determinism-gate.yml b/.github/workflows/determinism-gate.yml
index 45043972df..e058c23139 100644
--- a/.github/workflows/determinism-gate.yml
+++ b/.github/workflows/determinism-gate.yml
@@ -48,7 +48,7 @@ jobs:
     name: TS golden vectors
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v6
         with:
           node-version: '20'
@@ -66,7 +66,7 @@ jobs:
       # README pins PYTHONHASHSEED=0 for any cross-language hashing - honor it.
       PYTHONHASHSEED: '0'
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: '3.x'
@@ -86,7 +86,7 @@ jobs:
     name: Rust golden vectors + loom_py parity
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Toolchain versions
         run: |
           rustc --version
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 4473ac272b..fb6730e6c2 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -57,7 +57,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
index dec015b0ba..954fa6e1ea 100644
--- a/.github/workflows/npm-publish.yml
+++ b/.github/workflows/npm-publish.yml
@@ -64,7 +64,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
diff --git a/.github/workflows/release-pypi.yml b/.github/workflows/release-pypi.yml
index 67484ea299..374e9081ea 100644
--- a/.github/workflows/release-pypi.yml
+++ b/.github/workflows/release-pypi.yml
@@ -31,7 +31,7 @@ jobs:
   build-rpg:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Trust workspace (git safe.directory)
         run: git config --global --add safe.directory '*'
       - uses: actions/setup-python@v6
@@ -53,7 +53,7 @@ jobs:
         os: [ubuntu-latest, macos-latest, windows-latest]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Trust workspace (git safe.directory)
         run: git config --global --add safe.directory '*'
       - name: Build abi3 wheel
@@ -71,7 +71,7 @@ jobs:
   build-native-sdist:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Trust workspace (git safe.directory)
         run: git config --global --add safe.directory '*'
       - name: Build sdist