diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 96d6593..2847948 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -11,7 +11,7 @@ jobs:
     name: "IntentProof CI: Build and Test"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Read pinned spec ref
         id: spec_ref
@@ -24,7 +24,7 @@ jobs:
           echo "ref=$ref" >> "$GITHUB_OUTPUT"
 
       - name: Checkout intentproof-spec at pinned ref
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: IntentProof/intentproof-spec
           ref: ${{ steps.spec_ref.outputs.ref }}
diff --git a/.github/workflows/release-binaries.yml b/.github/workflows/release-binaries.yml
index 8fd527e..94fe449 100644
--- a/.github/workflows/release-binaries.yml
+++ b/.github/workflows/release-binaries.yml
@@ -25,7 +25,7 @@ jobs:
       release_ref: ${{ steps.release.outputs.release_ref }}
       release_version: ${{ steps.release.outputs.release_version }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event_name == 'workflow_dispatch' && inputs.release_ref || github.ref }}
           fetch-depth: 0
@@ -121,7 +121,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.ref }}
           fetch-depth: 0
diff --git a/.github/workflows/release-build-sign.yml b/.github/workflows/release-build-sign.yml
index 9f84265..931cfba 100644
--- a/.github/workflows/release-build-sign.yml
+++ b/.github/workflows/release-build-sign.yml
@@ -112,7 +112,7 @@ jobs:
       contents: read
       id-token: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.release_ref }}
 
@@ -245,7 +245,7 @@ jobs:
       contents: read
       id-token: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.release_ref }}
       - uses: actions/setup-node@v6
@@ -277,7 +277,7 @@ jobs:
     env:
       PYPI_API_TOKEN: ${{ secrets.pypi_api_token }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.release_ref }}
       - uses: actions/setup-python@v6