diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e533dc8..7c82425 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,7 +16,7 @@ jobs:
     # Self-hosted to preserve free GitHub-hosted minutes.
     runs-on: [self-hosted, beast-unit]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Setup .NET
         uses: actions/setup-dotnet@v4
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a402d6a..2f32e4b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -24,7 +24,7 @@ jobs:
     # Multi-arch builds are slow on GitHub-hosted; use the beast.
     runs-on: [self-hosted, beast-unit]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           # workflow_dispatch passes the tag via input; tag pushes use GITHUB_REF_NAME.