diff --git a/.github/workflows/do-release.yml b/.github/workflows/do-release.yml
index c1a8839..0df5330 100644
--- a/.github/workflows/do-release.yml
+++ b/.github/workflows/do-release.yml
@@ -25,7 +25,7 @@ jobs:
       base-version: ${{ steps.maven_release.outputs.BASE_VERSION }}
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Verify release notes file exists
       run: |
@@ -93,7 +93,7 @@ jobs:
     runs-on: windows-latest
     steps:
     - name: Checkout release tag
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         ref: ${{ needs.do-release.outputs.tag }}
 
@@ -169,7 +169,7 @@ jobs:
       FULL_VERSION: jsignpdf-pades-${{ needs.do-release.outputs.version }}
     steps:
     - name: Checkout release tag
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         ref: ${{ needs.do-release.outputs.tag }}
 
diff --git a/.github/workflows/pr-builder.yaml b/.github/workflows/pr-builder.yaml
index 8420645..859eb10 100644
--- a/.github/workflows/pr-builder.yaml
+++ b/.github/workflows/pr-builder.yaml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Set up JDK
         uses: actions/setup-java@v5
         with:
diff --git a/.github/workflows/push-snapshots.yaml b/.github/workflows/push-snapshots.yaml
index 81f751a..590c3a5 100644
--- a/.github/workflows/push-snapshots.yaml
+++ b/.github/workflows/push-snapshots.yaml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Set up Java and credentials
         uses: actions/setup-java@v5
         with: