diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 117f1e1..ece9562 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -15,7 +15,7 @@ jobs:
         name: Lint & Typecheck
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@v7
 
             - uses: oven-sh/setup-bun@3d267786b128fe76c2f16a390aa2448b815359f3
               with:
@@ -42,7 +42,7 @@ jobs:
         name: Secret Scanning
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@v7
               with:
                   fetch-depth: 0
 
@@ -67,7 +67,7 @@ jobs:
         name: Dependency Audit
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@v7
 
             - uses: oven-sh/setup-bun@3d267786b128fe76c2f16a390aa2448b815359f3
               with:
@@ -100,7 +100,7 @@ jobs:
         name: Test
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@v7
 
             - uses: oven-sh/setup-bun@3d267786b128fe76c2f16a390aa2448b815359f3
               with:
@@ -142,7 +142,7 @@ jobs:
                       binary: dist/ek.exe
 
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@v7
 
             - uses: oven-sh/setup-bun@3d267786b128fe76c2f16a390aa2448b815359f3
               with:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2a70506..a292fe5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -14,7 +14,7 @@ jobs:
         name: Build Linux
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@v7
               with:
                   fetch-depth: 0
 
@@ -67,7 +67,7 @@ jobs:
         name: Build macOS
         runs-on: macos-latest
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@v7
               with:
                   fetch-depth: 0
 
@@ -117,7 +117,7 @@ jobs:
         name: Build Windows
         runs-on: windows-latest
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@v7
 
             - uses: oven-sh/setup-bun@3d267786b128fe76c2f16a390aa2448b815359f3
               with:
@@ -164,7 +164,7 @@ jobs:
             contents: write
 
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@v7
               with:
                   fetch-depth: 0
                   ref: ${{ github.ref }}
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 67e2e9f..8af0bc9 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -10,7 +10,7 @@ jobs:
         name: Dependency Audit
         runs-on: blacksmith-2vcpu-ubuntu-2404
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@v7
 
             - uses: oven-sh/setup-bun@3d267786b128fe76c2f16a390aa2448b815359f3
               with:
@@ -43,7 +43,7 @@ jobs:
         name: Full Secret Scan
         runs-on: blacksmith-2vcpu-ubuntu-2404
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@v7
               with:
                   fetch-depth: 0
 
@@ -68,7 +68,7 @@ jobs:
         name: License Compliance
         runs-on: blacksmith-2vcpu-ubuntu-2404
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@v7
 
             - uses: oven-sh/setup-bun@3d267786b128fe76c2f16a390aa2448b815359f3
               with: