diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b943c2e..f64772c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -19,7 +19,7 @@ jobs:
     if: "!startsWith(github.event.head_commit.message, 'chore: update manifest')"
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install PSScriptAnalyzer
         shell: pwsh
@@ -158,7 +158,7 @@ jobs:
     if: "!startsWith(github.event.head_commit.message, 'chore: update manifest')"
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Validate task XML can be registered
         shell: pwsh
@@ -234,7 +234,7 @@ jobs:
       !startsWith(github.event.head_commit.message, 'chore: update manifest')
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           # >=2 so the bot's manifest commit can git-rev-parse its parent.
           # Was 1, which broke the commit-message subject and emitted