diff --git a/.github/workflows/bundle-size.yml b/.github/workflows/bundle-size.yml
index 9ecb16a..c414f9c 100644
--- a/.github/workflows/bundle-size.yml
+++ b/.github/workflows/bundle-size.yml
@@ -25,7 +25,7 @@ jobs:
 
     steps:
       - name: Check out the PR merge
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
       # Both snapshots come from the PR's script, so they share one format even when it changes.
@@ -33,7 +33,7 @@ jobs:
         run: cp scripts/bundle-size/report.mjs "$RUNNER_TEMP/report.mjs"
       - name: Check out the base revision
         if: matrix.target == 'base'
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
           ref: ${{ github.event.pull_request.base.sha }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8517977..a0a0038 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: ./.github/actions/setup
       # Lint and unit tests need no generated types, so they run before `prepare`
       # and fail fast.
@@ -45,7 +45,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: ./.github/actions/setup
       - run: pnpm build
         env:
@@ -58,7 +58,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: ./.github/actions/setup
         with:
           install: false
@@ -70,8 +70,8 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
+      - uses: actions/checkout@v7
         with:
           repository: comarkdown/comark
           path: .consumer
diff --git a/.github/workflows/smoke.yml b/.github/workflows/smoke.yml
index 1a2ae62..561fcb2 100644
--- a/.github/workflows/smoke.yml
+++ b/.github/workflows/smoke.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       # The tests of the deployed commit, not the default branch's.
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event.deployment.sha }}
           persist-credentials: false