diff --git a/.github/workflows/bandit-sarif.yml b/.github/workflows/bandit-sarif.yml
index e2fdf8e..a826515 100644
--- a/.github/workflows/bandit-sarif.yml
+++ b/.github/workflows/bandit-sarif.yml
@@ -26,7 +26,7 @@ jobs:
     steps:
       - # Checkout repository code
         name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - # Setup Python for Bandit scanning
         name: Set up Python
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5b55b93..dfd8e46 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -53,7 +53,7 @@ jobs:
     steps:
       - # Checkout repository code
         name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - # Setup Python version and pip cache
         name: Set up Python
@@ -191,7 +191,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Python
         uses: actions/setup-python@v6
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index dafcf27..9e46925 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -59,7 +59,7 @@ jobs:
         # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v7
 
     # Add any setup steps before running the `github/codeql-action/init` action.
     # This includes steps like installing compilers or runtimes (`actions/setup-node`
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 4043bd9..3c17ad8 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -24,7 +24,7 @@ jobs:
     steps:
       - # Checkout repository code
         name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - # Setup Python for MkDocs build
         name: Set up Python
diff --git a/.github/workflows/i18n.yml b/.github/workflows/i18n.yml
index dc5e73e..d6e28ce 100644
--- a/.github/workflows/i18n.yml
+++ b/.github/workflows/i18n.yml
@@ -21,7 +21,7 @@ jobs:
     steps:
       - # Checkout repository code
         name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - # Setup Python 3.12 for i18n tools
         name: Set up Python
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 0e5be5b..c5dbf22 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -26,7 +26,7 @@ jobs:
     steps:
       - # Checkout repository code
         name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - # Setup Python and pip cache
         name: Set up Python
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 726f4b6..a5e5dc5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Python
         uses: actions/setup-python@v6
diff --git a/.github/workflows/vibe-coded.yml b/.github/workflows/vibe-coded.yml
index 127df0e..131967c 100644
--- a/.github/workflows/vibe-coded.yml
+++ b/.github/workflows/vibe-coded.yml
@@ -28,7 +28,7 @@ jobs:
         # rejected by the protected branch. Falls back to GITHUB_TOKEN if the
         # secret is unset (push will then be skipped, not fail the run).
         name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
           token: ${{ secrets.VIBE_BADGE_TOKEN || secrets.GITHUB_TOKEN }}