diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 35e15e19..4ce60505 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -21,10 +21,10 @@ jobs:
     name: lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.1
         with:
           enable-cache: true
           cache-dependency-glob: uv.lock
@@ -42,10 +42,10 @@ jobs:
     name: unit tests
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.1
         with:
           enable-cache: true
           cache-dependency-glob: uv.lock
@@ -63,10 +63,10 @@ jobs:
     name: unit tests (3.13)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.1
         with:
           enable-cache: true
           cache-dependency-glob: uv.lock
@@ -84,10 +84,10 @@ jobs:
     name: integration tests
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.1
         with:
           enable-cache: true
           cache-dependency-glob: uv.lock
@@ -105,10 +105,10 @@ jobs:
     name: integration tests (3.13)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.1
         with:
           enable-cache: true
           cache-dependency-glob: uv.lock
@@ -126,10 +126,10 @@ jobs:
     name: package build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.1
         with:
           enable-cache: true
           cache-dependency-glob: uv.lock
diff --git a/.github/workflows/commits.yml b/.github/workflows/commits.yml
index 936ce8f9..dfa41cef 100644
--- a/.github/workflows/commits.yml
+++ b/.github/workflows/commits.yml
@@ -18,7 +18,7 @@ jobs:
     if: github.event_name == 'pull_request'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Validate Conventional Commit PR title
         env:
@@ -29,7 +29,7 @@ jobs:
     name: commit messages
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 0d232459..529b1766 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -36,7 +36,7 @@ jobs:
   links:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Validate Markdown docs
         run: make docs-check