diff --git a/.github/workflows/auto-update.yml b/.github/workflows/auto-update.yml
index d7e11f4..488cba7 100644
--- a/.github/workflows/auto-update.yml
+++ b/.github/workflows/auto-update.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout this repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v7
 
       - name: Run desktop-snaps action (Snapcraft)
         if: ${{ github.event_name == 'schedule' || github.event.inputs.workflow_choice == 'snapcraft' || github.event.inputs.workflow_choice == 'both' }}
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ad81c79..fe1efdb 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -52,7 +52,7 @@ jobs:
         go: [ '1.21', '1.22', '1.23', 'stable' ]
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Install cgo dependencies
         run: |
@@ -126,7 +126,7 @@ jobs:
             qemu-arch: riscv64
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       # ---- native arm64 -----------------------------------------------------
       - name: Build & Test (native)
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index dd08fd0..e57c87f 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -41,7 +41,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Install cgo dependencies
         run: |
diff --git a/.github/workflows/emulator-test.yml b/.github/workflows/emulator-test.yml
index 3409f61..7bafc7a 100644
--- a/.github/workflows/emulator-test.yml
+++ b/.github/workflows/emulator-test.yml
@@ -70,7 +70,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Check out ipp-usb
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Set up Go
         uses: actions/setup-go@v5
diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml
index c570125..f362388 100644
--- a/.github/workflows/govulncheck.yml
+++ b/.github/workflows/govulncheck.yml
@@ -33,7 +33,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 20
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Install cgo dependencies
         run: |
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 635913e..a81ebb2 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -35,7 +35,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Set up Go
         uses: actions/setup-go@v5
@@ -63,7 +63,7 @@ jobs:
       # Lint the vendored build exactly as it is compiled.
       GOFLAGS: "-mod=vendor"
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Install cgo dependencies
         run: |
@@ -94,7 +94,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Install cgo dependencies
         run: |
diff --git a/.github/workflows/modules.yml b/.github/workflows/modules.yml
index e79d474..5900bed 100644
--- a/.github/workflows/modules.yml
+++ b/.github/workflows/modules.yml
@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Set up Go
         uses: actions/setup-go@v5
diff --git a/.github/workflows/registry-actions.yml b/.github/workflows/registry-actions.yml
index 7313f34..534d007 100644
--- a/.github/workflows/registry-actions.yml
+++ b/.github/workflows/registry-actions.yml
@@ -26,7 +26,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Pack with Rockcraft
         uses: canonical/craft-actions/rockcraft-pack@main
@@ -46,7 +46,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Download Rock Artifact
         uses: actions/download-artifact@v4
diff --git a/.github/workflows/snap-test.yml b/.github/workflows/snap-test.yml
index 7f3c543..1aab957 100644
--- a/.github/workflows/snap-test.yml
+++ b/.github/workflows/snap-test.yml
@@ -94,7 +94,7 @@ jobs:
 
     steps:
       - name: Check out ipp-usb
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           # The snap builds from `source: .` at git tag 0.9.29, so the full
           # history and tags must be present.