diff --git a/.github/workflows/build-docker.yml b/.github/workflows/build-docker.yml
index d4f216f..caf08c8 100644
--- a/.github/workflows/build-docker.yml
+++ b/.github/workflows/build-docker.yml
@@ -20,7 +20,7 @@ jobs:
           - { name: act, containerfile: container/act.containerfile }
           - { name: act-build, containerfile: container/act-build.containerfile }
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/download-artifact@v8
         with:
           path: .
diff --git a/.github/workflows/build-npm.yml b/.github/workflows/build-npm.yml
index 844696b..0794dbe 100644
--- a/.github/workflows/build-npm.yml
+++ b/.github/workflows/build-npm.yml
@@ -8,7 +8,7 @@ jobs:
     name: npm packages
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: actions/download-artifact@v8
         with:
diff --git a/.github/workflows/build-pypi.yml b/.github/workflows/build-pypi.yml
index 3498a69..354cff0 100644
--- a/.github/workflows/build-pypi.yml
+++ b/.github/workflows/build-pypi.yml
@@ -26,7 +26,7 @@ jobs:
           - { name: windows-x64, os: windows-latest, target: "", manylinux: "", zig: false }
           - { name: windows-arm64, os: windows-latest, target: aarch64-pc-windows-msvc, manylinux: "", zig: false }
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: "3.14"
@@ -58,7 +58,7 @@ jobs:
           - { name: act-cli, manifest: act-cli/Cargo.toml }
           - { name: act-build, manifest: act-build/Cargo.toml }
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: moonrepo/setup-rust@v1
         with:
           bins: wit-deps-cli
diff --git a/.github/workflows/build-sbom.yml b/.github/workflows/build-sbom.yml
index 65f1763..2b82427 100644
--- a/.github/workflows/build-sbom.yml
+++ b/.github/workflows/build-sbom.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: dtolnay/rust-toolchain@stable
       - uses: taiki-e/cache-cargo-install-action@v3
         with:
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 107969f..aa0fd5b 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -34,7 +34,7 @@ jobs:
             ext: .exe
             dest: windows-aarch64.exe
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: moonrepo/setup-rust@v1
         with:
           channel: stable
@@ -78,7 +78,7 @@ jobs:
           - name: linux-riscv64-musl
             target: riscv64gc-unknown-linux-musl
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: moonrepo/setup-rust@v1
         with:
           channel: stable
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 668677f..7bd87d4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 20
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: moonrepo/setup-rust@v1
         with:
           channel: stable
@@ -35,7 +35,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: moonrepo/setup-rust@v1
         with:
           channel: stable
@@ -50,7 +50,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: moonrepo/setup-rust@v1
         with:
           channel: stable
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e4b90ab..5c6aa11 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -125,7 +125,7 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: dtolnay/rust-toolchain@stable
       - uses: taiki-e/cache-cargo-install-action@v3
         with:
@@ -159,7 +159,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/download-artifact@v8
         with:
           path: artifacts