diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index bca78c72..8a126994 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -51,7 +51,7 @@ jobs:
           private-key: ${{ secrets.RENOVATE_FIX_APP_PRIVATE_KEY }}
 
       - if: steps.filter.outputs.relevant == 'true'
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.head.ref }}
           # Pushing under the App identity (not GITHUB_TOKEN) makes
@@ -124,7 +124,7 @@ jobs:
       checks: ${{ steps.checks.outputs.result }}
       packages: ${{ steps.packages.outputs.result }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: DeterminateSystems/nix-installer-action@v22
       - id: checks
         run: |
@@ -145,7 +145,7 @@ jobs:
       matrix:
         check: ${{ fromJSON(needs.list.outputs.checks) }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: DeterminateSystems/nix-installer-action@v22
       - uses: DeterminateSystems/magic-nix-cache-action@v14
         with:
@@ -159,7 +159,7 @@ jobs:
       matrix:
         package: ${{ fromJSON(needs.list.outputs.packages) }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: DeterminateSystems/nix-installer-action@v22
       - uses: DeterminateSystems/magic-nix-cache-action@v14
         with:
diff --git a/.github/workflows/jvm-bindings.yaml b/.github/workflows/jvm-bindings.yaml
index 87cde098..958df712 100644
--- a/.github/workflows/jvm-bindings.yaml
+++ b/.github/workflows/jvm-bindings.yaml
@@ -25,7 +25,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-java@v5
         with:
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 69d660e8..6b556239 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -13,7 +13,7 @@ jobs:
     outputs:
       version: ${{ steps.resolve.outputs.version }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: main
       - id: resolve
@@ -34,7 +34,7 @@ jobs:
     outputs:
       version: ${{ needs.setup.outputs.version }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: main
 
@@ -86,7 +86,7 @@ jobs:
     needs: publish
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: v${{ needs.publish.outputs.version }}
       - uses: DeterminateSystems/nix-installer-action@v22
@@ -108,7 +108,7 @@ jobs:
     needs: publish
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: v${{ needs.publish.outputs.version }}
       - uses: DeterminateSystems/nix-installer-action@v22
@@ -137,7 +137,7 @@ jobs:
     # Central) means worst-case ~60 min.
     timeout-minutes: 90
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: v${{ needs.publish.outputs.version }}
 
@@ -175,7 +175,7 @@ jobs:
       contents: read
       id-token: write # npm trusted-publishing OIDC
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: v${{ needs.publish.outputs.version }}
       - uses: actions/setup-node@v6
@@ -228,7 +228,7 @@ jobs:
     runs-on: ${{ matrix.runner }}
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: v${{ needs.publish.outputs.version }}
       - uses: actions/setup-go@v6
@@ -267,7 +267,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Mark release as non-draft
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/scip-examples.yaml b/.github/workflows/scip-examples.yaml
index 4fb41968..a99bae3a 100644
--- a/.github/workflows/scip-examples.yaml
+++ b/.github/workflows/scip-examples.yaml
@@ -55,7 +55,7 @@ jobs:
       cancel-in-progress: true
     steps:
       - name: Checkout ${{ matrix.target.repository }}
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: ${{ matrix.target.repository }}
           fetch-depth: 1