diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 26d6753..db76af7 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -26,7 +26,7 @@ jobs:
     name: Semver Checks
     runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: obi1kenobi/cargo-semver-checks-action@v2
       with:
         # Pinned until cargo-semver-checks supports rustdoc format v57 (Rust 1.93+)
@@ -42,7 +42,7 @@ jobs:
         os: [ubuntu-latest]
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 20
@@ -59,7 +59,7 @@ jobs:
       - name: cargo clippy (non-gating)
         run: cargo clippy
       - name: Checkout ostree-rs-ext
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: ostreedev/ostree-rs-ext
           path: ostree-rs-ext
diff --git a/.github/workflows/cratesio-release.yml b/.github/workflows/cratesio-release.yml
index 294789f..f7478c8 100644
--- a/.github/workflows/cratesio-release.yml
+++ b/.github/workflows/cratesio-release.yml
@@ -9,7 +9,7 @@ jobs:
     permissions:
       id-token: write     # Required for OIDC token exchange
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: rust-lang/crates-io-auth-action@v1
       id: auth
     - run: cargo publish