diff --git a/.github/workflows/backup.yml b/.github/workflows/backup.yml
index 97eb2dc..19cc82a 100644
--- a/.github/workflows/backup.yml
+++ b/.github/workflows/backup.yml
@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 36dfd35..228e817 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3
@@ -102,7 +102,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node
         uses: actions/setup-node@v4
@@ -140,7 +140,7 @@ jobs:
     runs-on: windows-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node
         uses: actions/setup-node@v4
@@ -184,7 +184,7 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/v')
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/release-gates.yml b/.github/workflows/release-gates.yml
index 3e7720f..7becc96 100644
--- a/.github/workflows/release-gates.yml
+++ b/.github/workflows/release-gates.yml
@@ -28,7 +28,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Build production image
         run: docker build -t ${{ env.IMAGE_TAG }} -f apps/backend/Dockerfile.prod ./apps/backend
@@ -68,7 +68,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Set up Helm
         uses: azure/setup-helm@v4
@@ -110,7 +110,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Build production image
         run: docker build -t ${{ env.IMAGE_TAG }} -f apps/backend/Dockerfile.prod ./apps/backend
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 3f60b8f..1503d06 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup DeepaBMS
         uses: ./.github/actions/setup
@@ -61,7 +61,7 @@ jobs:
     if: ${{ github.event_name == 'push' }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       # Retry the build: sqlite3 prebuilt-binary download occasionally hits
       # transient ECONNRESET during `npm ci` (native addon fetch). The Build
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 4094306..41a7a8a 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -21,7 +21,7 @@ jobs:
       # Local composite actions must be resolved from the checked-out
       # workspace, so checkout explicitly before 'Setup DeepaBMS'.
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup DeepaBMS
         uses: ./.github/actions/setup
@@ -52,7 +52,7 @@ jobs:
       JWT_SECRET: ci-test-secret
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v4