diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 6dba82b4..abfcc35 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -11,5 +11,5 @@ jobs:
   shellcheck:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: nextstrain/.github/actions/shellcheck@master
diff --git a/.github/workflows/pre-commit.yaml b/.github/workflows/pre-commit.yaml
index c63b890..5dc6838 100644
--- a/.github/workflows/pre-commit.yaml
+++ b/.github/workflows/pre-commit.yaml
@@ -7,7 +7,7 @@ jobs:
   pre-commit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: "3.12"
diff --git a/.github/workflows/update-downstream-repos.yaml b/.github/workflows/update-downstream-repos.yaml
index a822a49..76860d9 100644
--- a/.github/workflows/update-downstream-repos.yaml
+++ b/.github/workflows/update-downstream-repos.yaml
@@ -73,7 +73,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout ${{ matrix.repo }}
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: ${{ matrix.repo }}
           # Fetch all history since `git subrepo pull` needs to check history
@@ -84,7 +84,7 @@ jobs:
         # keep it in a path within the downstream repo that does not interfere
         # with the subrepo changes
       - name: Checkout git-subrepo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: "ingydotnet/git-subrepo"
           path: ${{ env.GIT_SUBREPO_DIR }}