diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ab0cdc9..0dce40a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,7 +18,7 @@ jobs:
     name: Build & Test (Linux)
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install apt dependencies
         run: |
@@ -61,7 +61,7 @@ jobs:
     name: clang-format
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install clang-format
         run: |
@@ -78,7 +78,7 @@ jobs:
     name: clang-tidy
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install dependencies
         run: |
@@ -121,7 +121,7 @@ jobs:
     name: coverage
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install apt dependencies
         run: |
@@ -163,7 +163,7 @@ jobs:
         # Upload ONLY the gcovr report. Without disable_search + plugins: noop
         # the action re-runs gcov over the whole build tree and pulls system
         # headers and tests into the report, which the src/ filter excludes.
-        uses: codecov/codecov-action@v6
+        uses: codecov/codecov-action@v7
         with:
           files: coverage.xml
           disable_search: true
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index a2e4c6c..6bb9dde 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -31,7 +31,7 @@ jobs:
         language: [c-cpp]
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 38a8c38..cb7283f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -23,7 +23,7 @@ jobs:
     name: Build & publish (Linux x64)
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install apt dependencies
         run: |