diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f2eefa7..5cf1a3a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -11,10 +11,10 @@ jobs:
     name: "IntentProof CI: Build and Test"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Checkout intentproof-tools (SPEC_REF source)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: IntentProof/intentproof-tools
           ref: main
@@ -31,7 +31,7 @@ jobs:
           echo "ref=$ref" >> "$GITHUB_OUTPUT"
 
       - name: Checkout intentproof-spec at pinned ref
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: IntentProof/intentproof-spec
           ref: ${{ steps.spec_ref.outputs.ref }}
diff --git a/.github/workflows/release-pypi.yml b/.github/workflows/release-pypi.yml
index 019ffb6..f165faf 100644
--- a/.github/workflows/release-pypi.yml
+++ b/.github/workflows/release-pypi.yml
@@ -31,12 +31,12 @@ jobs:
     name: "IntentProof Release: Test Python Package"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event_name == 'workflow_dispatch' && inputs.release_ref || github.ref }}
 
       - name: Checkout intentproof-tools (SPEC_REF source)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: IntentProof/intentproof-tools
           ref: main
@@ -53,7 +53,7 @@ jobs:
           echo "ref=$ref" >> "$GITHUB_OUTPUT"
 
       - name: Checkout intentproof-spec at pinned ref
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: IntentProof/intentproof-spec
           ref: ${{ steps.spec_ref.outputs.ref }}
@@ -85,7 +85,7 @@ jobs:
       release_ref: ${{ steps.release.outputs.release_ref }}
       release_version: ${{ steps.release.outputs.release_version }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event_name == 'workflow_dispatch' && inputs.release_ref || github.ref }}