diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 17711a4..da7a6d7 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -9,7 +9,7 @@ jobs:
   analyze:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: github/codeql-action/init@v3
         with: { languages: go }
       - uses: actions/setup-go@v5
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 3a0650d..d141a04 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -6,6 +6,6 @@ jobs:
   dependency-review:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/dependency-review-action@v4
         with: { fail-on-severity: high }
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index 05e4d83..975c571 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Go
         uses: actions/setup-go@v5
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9cdcad8..a10bb99 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -7,7 +7,7 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with: { fetch-depth: 0 }
       - uses: actions/setup-go@v5
         with: { go-version-file: 'go.mod' }
diff --git a/.github/workflows/repository-baseline.yml b/.github/workflows/repository-baseline.yml
index 4d69abb..e6f6ca1 100644
--- a/.github/workflows/repository-baseline.yml
+++ b/.github/workflows/repository-baseline.yml
@@ -9,7 +9,7 @@ jobs:
   baseline:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Verify required files
         run: |
           for f in LICENSE README.md SECURITY.md CONTRIBUTING.md; do