diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5d96247..da9aa63 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,7 +18,7 @@ jobs:
         os: [ubuntu-latest, windows-latest]
         node-version: [20, 22]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v6
         with:
diff --git a/.github/workflows/drift-check.yml b/.github/workflows/drift-check.yml
index a19bdc2..9422bed 100644
--- a/.github/workflows/drift-check.yml
+++ b/.github/workflows/drift-check.yml
@@ -14,7 +14,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: TMHSDigital/Developer-Tools-Directory/.github/actions/drift-check@v1.17
         with:
           mode: self
diff --git a/.github/workflows/label-sync.yml b/.github/workflows/label-sync.yml
index a04ec02..89fa789 100644
--- a/.github/workflows/label-sync.yml
+++ b/.github/workflows/label-sync.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Get changed files
         id: changed
diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index ac33c34..30807fb 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -24,7 +24,7 @@ jobs:
       url: ${{ steps.deployment.outputs.page_url }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: actions/configure-pages@v6
 
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 81e372c..4f14951 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -18,7 +18,7 @@ jobs:
       # cleanly rather than leaving a perpetually-red post-merge workflow.
       HAS_NPM_TOKEN: ${{ secrets.NPM_TOKEN != '' }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v6
         with:
           node-version: 22
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2e3558d..7c878c7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -22,7 +22,7 @@ jobs:
       # release. main is protected and is NEVER written to by CI; bump the
       # version in your PR. A GITHUB_TOKEN release does not trigger publish.yml,
       # so this job dispatches it explicitly afterward.
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0