diff --git a/.github/workflows/compliance.yml b/.github/workflows/compliance.yml
index e989d39..60bebf6 100644
--- a/.github/workflows/compliance.yml
+++ b/.github/workflows/compliance.yml
@@ -32,7 +32,7 @@ jobs:
   version-bumped-on-change:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - name: plugin.json version must bump when functional source changes
@@ -74,7 +74,7 @@ jobs:
   idempotent-top-level-guard:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Top-level listeners/timers must be inside a reload guard
         run: |
           python3 - <<'PY'
@@ -117,7 +117,7 @@ jobs:
   changelog-updated:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - name: CHANGELOG.md Unreleased section must be updated for functional changes
diff --git a/.github/workflows/pullfrog.yml b/.github/workflows/pullfrog.yml
index b34af7e..7f6c779 100644
--- a/.github/workflows/pullfrog.yml
+++ b/.github/workflows/pullfrog.yml
@@ -22,7 +22,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
       - name: Run agent