diff --git a/.github/workflows/ci-python-zensical.yml b/.github/workflows/ci-python-zensical.yml
index 8ef9122..61a4c98 100644
--- a/.github/workflows/ci-python-zensical.yml
+++ b/.github/workflows/ci-python-zensical.yml
@@ -45,7 +45,7 @@ jobs:
       # ============================================================
 
       - name: A1) Checkout repository code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         # WHY: Required so all subsequent steps can access repo files.
 
       - name: A2) Install uv (with caching)
diff --git a/.github/workflows/deploy-zensical.yml b/.github/workflows/deploy-zensical.yml
index 42c136b..355c452 100644
--- a/.github/workflows/deploy-zensical.yml
+++ b/.github/workflows/deploy-zensical.yml
@@ -53,7 +53,7 @@ jobs:
       # ============================================================
 
       - name: A1) Checkout repository code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         # WHY: Required so all subsequent steps can access repo files.
 
       - name: A2) Configure GitHub Pages
diff --git a/.github/workflows/links.yml b/.github/workflows/links.yml
index 0329d14..0b257b5 100644
--- a/.github/workflows/links.yml
+++ b/.github/workflows/links.yml
@@ -37,7 +37,7 @@ jobs:
 
     steps:
       - name: 1) Checkout repository code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         # WHY: Required so Lychee can inspect repository files.
 
       - name: 2) Run Lychee
diff --git a/.github/workflows/pre-release.yml b/.github/workflows/pre-release.yml
index c1c9592..ba27f6f 100644
--- a/.github/workflows/pre-release.yml
+++ b/.github/workflows/pre-release.yml
@@ -43,7 +43,7 @@ jobs:
       # === ASSEMBLE ===
 
       - name: A1) Checkout repository with full history and tags
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0    # WHY: hatch-vcs needs full history to derive version from tags.
           fetch-tags: true
diff --git a/.github/workflows/release-pypi.yml b/.github/workflows/release-pypi.yml
index e3c8e9c..580a9f9 100644
--- a/.github/workflows/release-pypi.yml
+++ b/.github/workflows/release-pypi.yml
@@ -62,7 +62,7 @@ jobs:
     steps:
 
       - name: A1) Checkout (minimal, for release context)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         # WHY: Provides git/repo context for the release step.
         # OBS: No deep history needed here; the artifact is downloaded, not rebuilt.
 
@@ -135,7 +135,7 @@ jobs:
     steps:
 
       - name: A1) Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0    # WHY: hatch-vcs / version-aware docs may read tags.
           fetch-tags: true