diff --git a/.github/workflows/bump-cli.yml b/.github/workflows/bump-cli.yml
index 2db9520..b903da9 100644
--- a/.github/workflows/bump-cli.yml
+++ b/.github/workflows/bump-cli.yml
@@ -22,7 +22,7 @@ jobs:
           private-key: ${{ secrets.AETHERPAK_ACTION_BOT_APP_PRIVATE_KEY }}
 
       - name: Checkout Code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           token: ${{ steps.app-token.outputs.token }}
           persist-credentials: false
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index de31c80..6fad928 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -204,7 +204,7 @@ jobs:
             exit 1
           fi
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
           # Config mode only diffs gitlink trees, so contents aren't needed.
@@ -227,7 +227,7 @@ jobs:
           ref="${JWR##*@}"
           echo "ref=${ref}" >> "$GITHUB_OUTPUT"
       - name: Check out actions repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: aetherpak/actions
           ref: ${{ steps.aref.outputs.ref }}
@@ -289,11 +289,11 @@ jobs:
       options: --privileged
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           submodules: ${{ inputs.submodules }}
       - name: Check out actions repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: aetherpak/actions
           ref: ${{ needs.plan.outputs.actions-ref }}
@@ -336,7 +336,7 @@ jobs:
       image: ghcr.io/aetherpak/cli:${{ inputs.cli-version }}-builder
     steps:
       - name: Check out actions repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: aetherpak/actions
           ref: ${{ needs.plan.outputs.actions-ref }}
@@ -434,9 +434,9 @@ jobs:
       image: ghcr.io/aetherpak/cli:${{ inputs.cli-version }}-builder
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Check out actions repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: aetherpak/actions
           ref: ${{ needs.plan.outputs.actions-ref }}
@@ -483,9 +483,9 @@ jobs:
       url: ${{ steps.deploy.outputs.page_url }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Check out actions repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: aetherpak/actions
           ref: ${{ needs.plan.outputs.actions-ref }}
diff --git a/.github/workflows/site.yml b/.github/workflows/site.yml
index 0e89832..68c9ec0 100644
--- a/.github/workflows/site.yml
+++ b/.github/workflows/site.yml
@@ -16,7 +16,7 @@ jobs:
       name: github-pages
       url: ${{ steps.deploy.outputs.page_url }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Pin usage examples to this commit
         run: sed -i "s/__COMMIT_SHA__/${GITHUB_SHA}/g" docs/site/index.html
       - uses: actions/upload-pages-artifact@v5
diff --git a/.github/workflows/test-action-glue.yml b/.github/workflows/test-action-glue.yml
index 8714d61..dba9493 100644
--- a/.github/workflows/test-action-glue.yml
+++ b/.github/workflows/test-action-glue.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up aetherpak CLI
         uses: aetherpak/setup-cli@v1
@@ -81,7 +81,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up aetherpak CLI
         uses: aetherpak/setup-cli@v1
@@ -143,7 +143,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up aetherpak CLI
         uses: aetherpak/setup-cli@v1
@@ -205,7 +205,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up aetherpak CLI
         uses: aetherpak/setup-cli@v1
diff --git a/.github/workflows/test-core.yml b/.github/workflows/test-core.yml
index 4e82467..5b30358 100644
--- a/.github/workflows/test-core.yml
+++ b/.github/workflows/test-core.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up aetherpak CLI
         uses: aetherpak/setup-cli@v1
@@ -75,7 +75,7 @@ jobs:
         image: registry:2
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Create Mock OSTree Repository
         run: bash tests/mock_repo.sh
@@ -114,7 +114,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up aetherpak CLI
         uses: aetherpak/setup-cli@v1
@@ -181,7 +181,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up aetherpak CLI
         uses: aetherpak/setup-cli@v1
@@ -253,7 +253,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up aetherpak CLI
         uses: aetherpak/setup-cli@v1
@@ -317,7 +317,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up aetherpak CLI
         uses: aetherpak/setup-cli@v1
diff --git a/.github/workflows/test-lint.yml b/.github/workflows/test-lint.yml
index fd06888..0e55724 100644
--- a/.github/workflows/test-lint.yml
+++ b/.github/workflows/test-lint.yml
@@ -14,6 +14,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Run pre-commit
         uses: pre-commit/action@v3.0.1
diff --git a/.github/workflows/test-manifest-builder.yml b/.github/workflows/test-manifest-builder.yml
index fd55a09..5dfa6ae 100644
--- a/.github/workflows/test-manifest-builder.yml
+++ b/.github/workflows/test-manifest-builder.yml
@@ -19,7 +19,7 @@ jobs:
       options: --privileged
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Write a trivial manifest
         run: |
diff --git a/.github/workflows/test-signing.yml b/.github/workflows/test-signing.yml
index 80b42fb..19eb6e3 100644
--- a/.github/workflows/test-signing.yml
+++ b/.github/workflows/test-signing.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up aetherpak CLI
         uses: aetherpak/setup-cli@v1
@@ -67,7 +67,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up aetherpak CLI
         uses: aetherpak/setup-cli@v1
@@ -111,7 +111,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up aetherpak CLI
         uses: aetherpak/setup-cli@v1