diff --git a/.github/workflows/changelog-append.yml b/.github/workflows/changelog-append.yml
index 726a71a..157bede 100644
--- a/.github/workflows/changelog-append.yml
+++ b/.github/workflows/changelog-append.yml
@@ -55,7 +55,7 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0   # full history so the before..after range resolves
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d31f670..fdd6b67 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -40,7 +40,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Validate PowerShell and release scripts
         shell: pwsh
diff --git a/.github/workflows/commit-msg-check.yml b/.github/workflows/commit-msg-check.yml
index 436684a..3128234 100644
--- a/.github/workflows/commit-msg-check.yml
+++ b/.github/workflows/commit-msg-check.yml
@@ -18,7 +18,7 @@ jobs:
     timeout-minutes: 2
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/nightly-beta.yml b/.github/workflows/nightly-beta.yml
index 8383b96..9c7f9d5 100644
--- a/.github/workflows/nightly-beta.yml
+++ b/.github/workflows/nightly-beta.yml
@@ -21,7 +21,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
           persist-credentials: false
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b8bf21e..f9c4ec1 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -43,7 +43,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
           fetch-tags: true