diff --git a/.github/workflows/redist-publish.yaml b/.github/workflows/redist-publish.yaml
index d98af729..0a168348 100644
--- a/.github/workflows/redist-publish.yaml
+++ b/.github/workflows/redist-publish.yaml
@@ -22,7 +22,7 @@ jobs:
       variants: ${{ steps.load.outputs.variants }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Load variant matrix
         id: load
@@ -56,7 +56,7 @@ jobs:
 
     steps:
     - name: Checkout code
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         # Full history so we can diff the push range for per-variant change detection.
         fetch-depth: 0
diff --git a/.github/workflows/redist-update.yaml b/.github/workflows/redist-update.yaml
index 6ba8c450..4a28785d 100644
--- a/.github/workflows/redist-update.yaml
+++ b/.github/workflows/redist-update.yaml
@@ -32,7 +32,7 @@ jobs:
       sources: ${{ steps.load.outputs.sources }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Load variant + source matrices
         id: load
@@ -102,7 +102,7 @@ jobs:
       cancel-in-progress: false
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Download depot downloader
         uses: robinraju/release-downloader@28fc21f50d76778e7023361aa1f863e717d3d56f # v1
@@ -354,7 +354,7 @@ jobs:
 
       - name: Checkout repository
         if: steps.gate.outputs.changed == 'true'
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: master
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/redist-verify.yaml b/.github/workflows/redist-verify.yaml
index 4c802aa2..7d24e292 100644
--- a/.github/workflows/redist-verify.yaml
+++ b/.github/workflows/redist-verify.yaml
@@ -26,7 +26,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Resolve variant and redist directory
         run: |