diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1866b7d..5a7270a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,7 +14,7 @@ jobs:
   ci:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: pnpm/action-setup@v6
         # Version is read from packageManager in package.json.
diff --git a/.github/workflows/d1-backup.yml b/.github/workflows/d1-backup.yml
index 44ef480..31e34ae 100644
--- a/.github/workflows/d1-backup.yml
+++ b/.github/workflows/d1-backup.yml
@@ -61,7 +61,7 @@ jobs:
     timeout-minutes: 15
     steps:
       - name: checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: setup node
         uses: actions/setup-node@v6
diff --git a/.github/workflows/demo-nuke.yml b/.github/workflows/demo-nuke.yml
index 1d00e22..05d7020 100644
--- a/.github/workflows/demo-nuke.yml
+++ b/.github/workflows/demo-nuke.yml
@@ -16,7 +16,7 @@ jobs:
   nuke:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: pnpm/action-setup@v6
 
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index f973c85..146cea4 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -18,7 +18,7 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: pnpm/action-setup@v6
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 27a3386..02bf4ff 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -27,7 +27,7 @@ jobs:
       contents: read
       id-token: write # required for OIDC + provenance
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: pnpm/action-setup@v6