diff --git a/.github/workflows/bump-core.yml b/.github/workflows/bump-core.yml
index 12b44b8..905acce 100644
--- a/.github/workflows/bump-core.yml
+++ b/.github/workflows/bump-core.yml
@@ -17,7 +17,7 @@ jobs:
   bump:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Pin core tag
         env:
           TAG: ${{ github.event.client_payload.tag || inputs.tag }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f19e81e..53c47ec 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -12,7 +12,7 @@ jobs:
   analyze-test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       # Optional: when repo variable ZUNIA_CORE_TAG is set (e.g. v0.1.0), download
       # public GitHub Release natives. No secrets required for public releases.