diff --git a/.github/workflows/ci-python-zensical.yml b/.github/workflows/ci-python-zensical.yml
index 1685363..16b9ed2 100644
--- a/.github/workflows/ci-python-zensical.yml
+++ b/.github/workflows/ci-python-zensical.yml
@@ -47,7 +47,7 @@ jobs:
       # ============================================================
 
       - name: A1) Checkout repository code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         # WHY: Required so all subsequent steps can access repo files.
 
       - name: A2) Install uv (with caching)
diff --git a/.github/workflows/deploy-zensical.yml b/.github/workflows/deploy-zensical.yml
index 6d9d831..e623f47 100644
--- a/.github/workflows/deploy-zensical.yml
+++ b/.github/workflows/deploy-zensical.yml
@@ -50,7 +50,7 @@ jobs:
       # ============================================================
 
       - name: A1) Checkout repository code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         # WHY: Required so all subsequent steps can access repo files.
 
       - name: A2) Configure GitHub Pages
diff --git a/.github/workflows/links.yml b/.github/workflows/links.yml
index e5966fd..ee5bd2a 100644
--- a/.github/workflows/links.yml
+++ b/.github/workflows/links.yml
@@ -37,7 +37,7 @@ jobs:
 
     steps:
       - name: 1) Checkout repository code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         # WHY: Required so Lychee can inspect repository files.
 
       - name: 2) Run Lychee
diff --git a/.github/workflows/pre-release.yml b/.github/workflows/pre-release.yml
index c093910..80889b8 100644
--- a/.github/workflows/pre-release.yml
+++ b/.github/workflows/pre-release.yml
@@ -34,7 +34,7 @@ jobs:
       # === ASSEMBLE ===
 
       - name: A1) Checkout repository with full history and tags
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0   # WHY: hatch-vcs needs full history to derive version from tags.
           fetch-tags: true
diff --git a/.github/workflows/python-315-ready.yml b/.github/workflows/python-315-ready.yml
index fc2f53c..26153e2 100644
--- a/.github/workflows/python-315-ready.yml
+++ b/.github/workflows/python-315-ready.yml
@@ -33,7 +33,7 @@ jobs:
       # ============================================================
 
       - name: A1) Checkout repository code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         # WHY: Required so all subsequent steps can access repo files.
 
       - name: A2) Install uv (with caching)
diff --git a/.github/workflows/release-pypi.yml b/.github/workflows/release-pypi.yml
index d8d5046..4f06142 100644
--- a/.github/workflows/release-pypi.yml
+++ b/.github/workflows/release-pypi.yml
@@ -46,7 +46,7 @@ jobs:
       # === ASSEMBLE ===
 
       - name: A1) Checkout repository with full history and tags
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0   # WHY: hatch-vcs needs full history to derive version from tags.
           fetch-tags: true