diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0003a7e..d2e9063 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -9,7 +9,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v7
         with:
           node-version: "24"
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ec58827..3c99f4b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0   # need full history + all tags to compute next version
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/selftest.yml b/.github/workflows/selftest.yml
index a2ed368..f95800e 100644
--- a/.github/workflows/selftest.yml
+++ b/.github/workflows/selftest.yml
@@ -14,7 +14,7 @@ jobs:
   selftest:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Run PolyScan on test fixtures
         id: scan