diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7e251af..700307c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,7 +14,7 @@ jobs:
     name: Bash Syntax
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Check install.sh syntax
         run: bash -n install.sh
@@ -41,7 +41,7 @@ jobs:
     name: Dry-run (Linux compat check)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Patch script for Linux dry-run
         # The script exits on non-Darwin; stub out the OS check so we can
diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
index e9838ad..5087689 100644
--- a/.github/workflows/claude.yml
+++ b/.github/workflows/claude.yml
@@ -23,7 +23,7 @@ jobs:
       actions: read # Required for Claude to read CI results on PRs
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c73b4cf..820c839 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -13,7 +13,7 @@ jobs:
     name: Create GitHub Release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Validate tag format
         run: |
diff --git a/.github/workflows/update-mirrors.yml b/.github/workflows/update-mirrors.yml
index f93e63e..8d2f8ef 100644
--- a/.github/workflows/update-mirrors.yml
+++ b/.github/workflows/update-mirrors.yml
@@ -24,7 +24,7 @@ jobs:
     name: Check Wikipedia for mirror changes
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Fetch and parse mirror list from Wikipedia
         id: check