diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6962cc9..38a5763 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -30,7 +30,7 @@ jobs:
     env:
       DATABASE_URL: postgresql://ocl:ocl@localhost:5432/ocl_test
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       # No `version:` here — pnpm is pinned via the root package.json `packageManager`
       # field. Specifying both makes pnpm/action-setup fail with a version conflict.
@@ -68,7 +68,7 @@ jobs:
     name: Docker image build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: docker/setup-buildx-action@v3
       - name: Build API image
         uses: docker/build-push-action@v6
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e62bf0b..ba1cae6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -55,7 +55,7 @@ jobs:
             build_args: |
               NEXT_PUBLIC_API_URL=http://localhost:4000
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - uses: docker/setup-buildx-action@v3
 
@@ -88,7 +88,7 @@ jobs:
     needs: [prep, images]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0