diff --git a/.github/workflows/deploy-records.yml b/.github/workflows/deploy-records.yml
index 122d542..6d8364b 100644
--- a/.github/workflows/deploy-records.yml
+++ b/.github/workflows/deploy-records.yml
@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     environment: production
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: gacts/install-dnscontrol@v1
       - name: Create credentials file
         run: echo '{"cloudflare":{"TYPE":"CLOUDFLAREAPI","accountid":"$CF_ID","apitoken":"$CF_TOKEN"}}' > ./creds.json
diff --git a/.github/workflows/deploy-sites.yml b/.github/workflows/deploy-sites.yml
index f007e05..9ecdffc 100644
--- a/.github/workflows/deploy-sites.yml
+++ b/.github/workflows/deploy-sites.yml
@@ -23,7 +23,7 @@ jobs:
       url: ${{ steps.deployment.outputs.page_url }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/configure-pages@v6
       - uses: actions/upload-pages-artifact@v5
         with: {path: sites/is-an.app}
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 55457ed..6125fe1 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -21,7 +21,7 @@ jobs:
     name: 🔐 GitLeaks
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with: {fetch-depth: 0}
       - uses: gacts/gitleaks@v1
 
@@ -29,6 +29,6 @@ jobs:
     name: 🌐 DNSControl check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: gacts/install-dnscontrol@v1
       - run: dnscontrol check