diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f858bcc..bcd453c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,7 +18,7 @@ jobs:
       matrix:
         os: [ubuntu-latest, macOS-latest]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Run unit tests (cross-platform core)
         run: make test
@@ -65,7 +65,7 @@ jobs:
     name: Format / lint / secrets
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Install pinned clang-format
         # Pinned via pip so the exact binary is reproducible across runners
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ceaead6..3596a08 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,7 +18,7 @@ jobs:
     name: Build & publish release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Run unit tests
         run: make test