diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index d57e20a..7bbe964 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -20,7 +20,7 @@ jobs:
           - "examples/aggregate"
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: bazel-contrib/setup-bazel@0.19.0
         with:
           bazelisk-cache: true
@@ -45,7 +45,7 @@ jobs:
   linux-arm64-smoke:
     runs-on: ubuntu-24.04-arm
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: bazel-contrib/setup-bazel@0.19.0
         with:
           bazelisk-cache: true
diff --git a/.github/workflows/tag.yaml b/.github/workflows/tag.yaml
index 1fcb134..abb114c 100644
--- a/.github/workflows/tag.yaml
+++ b/.github/workflows/tag.yaml
@@ -22,7 +22,7 @@ jobs:
       new-tag-version-type: ${{ steps.ccv.outputs.new-tag-version-type }}
       recently-tagged: ${{ steps.recent-tag.outputs.recently-tagged }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           # Need enough history to find the prior release tag
           fetch-depth: 0
diff --git a/.github/workflows/verify-hooks.yml b/.github/workflows/verify-hooks.yml
index bb7d4e4..cae0707 100644
--- a/.github/workflows/verify-hooks.yml
+++ b/.github/workflows/verify-hooks.yml
@@ -8,7 +8,7 @@ jobs:
   verify-hooks:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 100
       - uses: pnpm/action-setup@v6