diff --git a/.github/workflows/agent-markdown.yml b/.github/workflows/agent-markdown.yml
index bf01e4f..f84810c 100644
--- a/.github/workflows/agent-markdown.yml
+++ b/.github/workflows/agent-markdown.yml
@@ -11,7 +11,7 @@ jobs:
         secrets: servc/data/iac/servc agent-auth-token | AGENT_TOKEN ;
         url: ${{ secrets.VAULT_ADDR }}
         username: ${{ secrets.VAULT_USERNAME }}
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         submodules: true
     - name: Send to embeddings
diff --git a/.github/workflows/changelog.yml b/.github/workflows/changelog.yml
index 7a65072..70f4d36 100644
--- a/.github/workflows/changelog.yml
+++ b/.github/workflows/changelog.yml
@@ -12,7 +12,7 @@ jobs:
         secrets: servc/data/iac/gitea token | PAT_TOKEN ;
         url: ${{ secrets.VAULT_ADDR }}
         username: ${{ secrets.VAULT_USERNAME }}
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         submodules: true
         token: ${{ steps.gitea_secrets.outputs.PAT_TOKEN }}
diff --git a/.github/workflows/commit.yml b/.github/workflows/commit.yml
index ef68666..65a8fb8 100644
--- a/.github/workflows/commit.yml
+++ b/.github/workflows/commit.yml
@@ -4,7 +4,7 @@ jobs:
     runs-on:
     - ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         fetch-depth: 0
         fetch-tags: true
diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml
index 47b5615..21e10c2 100644
--- a/.github/workflows/dependabot-auto-merge.yml
+++ b/.github/workflows/dependabot-auto-merge.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on:
     - ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         submodules: true
     - &id001
@@ -33,7 +33,7 @@ jobs:
     runs-on:
     - ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         submodules: true
     - *id001