diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c335967..ed5fd6d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,7 +13,7 @@ jobs:
       contents: read
       id-token: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v6
         with:
           node-version: 20
@@ -31,7 +31,7 @@ jobs:
       contents: read
       id-token: write   # required for both npm provenance and Sigstore cosign
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v6
         with:
           node-version: 20