diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6200c463f..f981f2cc7 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -157,7 +157,7 @@ jobs:
     runs-on: windows-latest
     timeout-minutes: 45
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v7
         with:
           python-version: ${{ env.PY_VERSION }}
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 08c7729ab..aa6d6e8c3 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -34,7 +34,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v7
diff --git a/.github/workflows/opencode-plugin.yml b/.github/workflows/opencode-plugin.yml
index a4dd1ccc2..8edcb84fc 100644
--- a/.github/workflows/opencode-plugin.yml
+++ b/.github/workflows/opencode-plugin.yml
@@ -33,7 +33,7 @@ jobs:
       run:
         working-directory: plugins/opencode
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v7
         with:
           node-version: "20"
diff --git a/.github/workflows/tools-hash-refresh.yml b/.github/workflows/tools-hash-refresh.yml
index 39aff5fc2..f27a609a5 100644
--- a/.github/workflows/tools-hash-refresh.yml
+++ b/.github/workflows/tools-hash-refresh.yml
@@ -21,7 +21,7 @@ jobs:
   verify-pins:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v7
         with:
           python-version: "3.12"