diff --git a/.github/workflows/android-release.yml b/.github/workflows/android-release.yml
index 5fbf625..758554f 100644
--- a/.github/workflows/android-release.yml
+++ b/.github/workflows/android-release.yml
@@ -40,7 +40,7 @@ jobs:
       N64RECOMP_COMMIT: '81213c1831fab2521a6a5459c67b63437d67e253'
     steps:
       - name: Checkout
-        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           submodules: recursive
           fetch-depth: 0   # full history + tags (versionCode is now tag-derived, not commit count)
diff --git a/.github/workflows/android.yml b/.github/workflows/android.yml
index 4cdf46d..328180c 100644
--- a/.github/workflows/android.yml
+++ b/.github/workflows/android.yml
@@ -47,7 +47,7 @@ jobs:
       N64RECOMP_COMMIT: '81213c1831fab2521a6a5459c67b63437d67e253'
     steps:
       - name: Checkout
-        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           submodules: recursive