diff --git a/.github/workflows/make.yml b/.github/workflows/make.yml
index ec0bc35..6e05b67 100644
--- a/.github/workflows/make.yml
+++ b/.github/workflows/make.yml
@@ -150,7 +150,7 @@ jobs:
 
       - name: Checkout
         if: steps.gate.outputs.enabled == 'true'
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           submodules: true
 
@@ -214,7 +214,7 @@ jobs:
     if: contains(format(',{0},', needs.setup.outputs.enabled_targets), ',linux-arm32,')
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           submodules: true
 
@@ -304,7 +304,7 @@ jobs:
     # ─────────────────────────────────────────────────────────────────
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           submodules: true
 
@@ -400,7 +400,7 @@ jobs:
     # times out, causing CI failures. Re-enable when server is stable.
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           submodules: true
 
@@ -443,7 +443,7 @@ jobs:
     # shared installer script patches it in after cloning Lazarus.
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           submodules: true
 
@@ -501,7 +501,7 @@ jobs:
     if: contains(format(',{0},', needs.setup.outputs.enabled_targets), ',solaris,')
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           submodules: true