diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b3b6cee..1f7eb7e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -33,7 +33,7 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
@@ -57,7 +57,7 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
@@ -84,7 +84,7 @@ jobs:
         python-version: ["3.11", "3.12", "3.13"]
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
@@ -118,12 +118,12 @@ jobs:
       packages: read
     steps:
       - name: Checkout decree-python
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
       - name: Checkout decree (for docker-compose + server + CLI)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: opendecree/decree
           path: decree
@@ -227,7 +227,7 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
@@ -268,12 +268,12 @@ jobs:
       packages: read
     steps:
       - name: Checkout decree-python
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
       - name: Checkout decree (for docker-compose + server)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: opendecree/decree
           path: decree
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 691e38c..c8d6c88 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -42,7 +42,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index f496a43..bb02f7f 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -14,7 +14,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: "3.12"
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 271be21..4f1f4d8 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -17,7 +17,7 @@ jobs:
       id-token: write
       contents: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: "3.12"
diff --git a/.github/workflows/regen-stubs.yml b/.github/workflows/regen-stubs.yml
index a96c127..e92e99c 100644
--- a/.github/workflows/regen-stubs.yml
+++ b/.github/workflows/regen-stubs.yml
@@ -13,7 +13,7 @@ jobs:
     name: Regen stubs for ${{ github.event.client_payload.version }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           persist-credentials: true