diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 302c2eb..11a2962 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -24,7 +24,7 @@ jobs:
   fmt:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: rustfmt
@@ -33,7 +33,7 @@ jobs:
   clippy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: clippy
@@ -43,7 +43,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: dtolnay/rust-toolchain@stable
       - uses: Swatinem/rust-cache@v2
       - run: cargo test --workspace
@@ -59,7 +59,7 @@ jobs:
   fixture-tamper-check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: dtolnay/rust-toolchain@stable
       - uses: Swatinem/rust-cache@v2
       - name: Regenerate fixtures and verify round-trip
diff --git a/.github/workflows/mirror-repo.yml b/.github/workflows/mirror-repo.yml
index 380cc7b..acd09b1 100644
--- a/.github/workflows/mirror-repo.yml
+++ b/.github/workflows/mirror-repo.yml
@@ -164,7 +164,7 @@ jobs:
           test -s ~/.config/freenet/git-identity.bundle
 
       - name: Check out source repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
           ref: ${{ inputs.branch }}
diff --git a/.github/workflows/rescue-demos.yml b/.github/workflows/rescue-demos.yml
index 7b34b40..02596ce 100644
--- a/.github/workflows/rescue-demos.yml
+++ b/.github/workflows/rescue-demos.yml
@@ -105,7 +105,7 @@ jobs:
       # repos in the future this should be revisited.
       - name: Clone upstream for --from
         if: matrix.github_repo != ''
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           repository: ${{ matrix.github_repo }}
           path: upstream