diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e5bb0ed..6a4a23b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -33,7 +33,7 @@ jobs:
         node: ["22.22.3", "24"]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v5
         with:
           node-version: ${{ matrix.node }}
diff --git a/.github/workflows/package.yml b/.github/workflows/package.yml
index d9cc39a..5adaded 100644
--- a/.github/workflows/package.yml
+++ b/.github/workflows/package.yml
@@ -13,7 +13,7 @@ jobs:
         os: [ubuntu-latest, macos-latest, windows-latest]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v5
         with:
           node-version: 22.22.3
diff --git a/.github/workflows/publish-npm.yml b/.github/workflows/publish-npm.yml
index 4dc264b..0bdad47 100644
--- a/.github/workflows/publish-npm.yml
+++ b/.github/workflows/publish-npm.yml
@@ -30,7 +30,7 @@ jobs:
       contents: read
       id-token: write
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event.release.tag_name }}
       - uses: actions/setup-node@v5
diff --git a/.github/workflows/publish-package-managers.yml b/.github/workflows/publish-package-managers.yml
index da5ff47..bc1f42e 100644
--- a/.github/workflows/publish-package-managers.yml
+++ b/.github/workflows/publish-package-managers.yml
@@ -20,7 +20,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event.release.tag_name || inputs.tag }}
       - uses: actions/setup-node@v5
@@ -52,7 +52,7 @@ jobs:
           node -e "JSON.parse(require('fs').readFileSync('generated/cortex.json','utf8'))"
       - run: node -e "JSON.parse(require('fs').readFileSync('server.json','utf8'))"
       - name: Checkout Homebrew tap
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           repository: Orthic-Labs/homebrew-tap
           token: ${{ secrets.HOMEBREW_TAP_TOKEN }}
@@ -70,7 +70,7 @@ jobs:
           title: "cortex ${{ steps.release.outputs.version }}"
           delete-branch: true
       - name: Checkout Scoop bucket
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           repository: Orthic-Labs/scoop-bucket
           token: ${{ secrets.HOMEBREW_TAP_TOKEN }}
diff --git a/.github/workflows/qualification.yml b/.github/workflows/qualification.yml
index b725f33..e0b74ca 100644
--- a/.github/workflows/qualification.yml
+++ b/.github/workflows/qualification.yml
@@ -16,7 +16,7 @@ jobs:
   qualification:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v5
         with:
           node-version: 22.22.3
@@ -34,7 +34,7 @@ jobs:
   schema:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v5
         with:
           node-version: 22.22.3
@@ -48,7 +48,7 @@ jobs:
   security:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v5
         with:
           node-version: 22.22.3
@@ -63,7 +63,7 @@ jobs:
   hardening:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v5
         with:
           node-version: 22.22.3
@@ -79,7 +79,7 @@ jobs:
   ax-conformance:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v5
         with:
           node-version: 22.22.3
diff --git a/.github/workflows/release-candidate.yml b/.github/workflows/release-candidate.yml
index c7d8c33..823254c 100644
--- a/.github/workflows/release-candidate.yml
+++ b/.github/workflows/release-candidate.yml
@@ -13,7 +13,7 @@ jobs:
         os: [ubuntu-latest, macos-latest, windows-latest]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v5
         with:
           node-version: 22.22.3