diff --git a/.github/workflows/codequal.yml b/.github/workflows/codequal.yml
index 59559a32..c13c0314 100644
--- a/.github/workflows/codequal.yml
+++ b/.github/workflows/codequal.yml
@@ -23,13 +23,13 @@ jobs:
       - name: XXX git permission quirk XXX
         run: |
           git config --global --add safe.directory $GITHUB_WORKSPACE
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           fetch-tags: true
           set-safe-directory: true
       - name: Clone cross-files
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref:  'main'
           repository: 'camelot-os/meson-cross-files'
diff --git a/.github/workflows/gnulinux.yml b/.github/workflows/gnulinux.yml
index ab99b062..c31cda89 100644
--- a/.github/workflows/gnulinux.yml
+++ b/.github/workflows/gnulinux.yml
@@ -84,13 +84,13 @@ jobs:
       - name: XXX git permission quirk XXX
         run: |
           git config --global --add safe.directory $GITHUB_WORKSPACE
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           fetch-tags: true
           set-safe-directory: true
       - name: Clone cross-files
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref:  'main'
           repository: 'camelot-os/meson-cross-files'
@@ -201,13 +201,13 @@ jobs:
       - name: XXX git permission quirk XXX
         run: |
           git config --global --add safe.directory $GITHUB_WORKSPACE
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           fetch-tags: true
           set-safe-directory: true
       - name: Clone cross-files
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref:  'main'
           repository: 'camelot-os/meson-cross-files'
@@ -290,13 +290,13 @@ jobs:
       - name: XXX git permission quirk XXX
         run: |
           git config --global --add safe.directory $GITHUB_WORKSPACE
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           fetch-tags: true
           set-safe-directory: true
       - name: Clone cross-files
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref:  'main'
           repository: 'camelot-os/meson-cross-files'
diff --git a/.github/workflows/macos.yml b/.github/workflows/macos.yml
index 512925f3..8a1a8297 100644
--- a/.github/workflows/macos.yml
+++ b/.github/workflows/macos.yml
@@ -27,7 +27,7 @@ jobs:
       - name: XXX git permission quirk XXX
         run: |
           git config --global --add safe.directory $GITHUB_WORKSPACE
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           fetch-tags: true
@@ -45,7 +45,7 @@ jobs:
     # https://github.com/actions/setup-python/issues/58
       - run: brew install dtc libssh2 curl srecord rustup
       - name: Clone cross-files
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref:  'main'
           repository: 'camelot-os/meson-cross-files'
diff --git a/.github/workflows/proof.yml b/.github/workflows/proof.yml
index f760db35..8cf870b6 100644
--- a/.github/workflows/proof.yml
+++ b/.github/workflows/proof.yml
@@ -26,7 +26,7 @@ jobs:
       - name: XXX git permission quirk XXX
         run: |
           git config --global --add safe.directory $GITHUB_WORKSPACE
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           fetch-tags: true
@@ -40,7 +40,7 @@ jobs:
           python3 -m venv venv
           echo "$PWD/venv/bin" >> $GITHUB_PATH
       - name: Clone cross-files
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref:  'main'
           repository: 'camelot-os/meson-cross-files'
diff --git a/.github/workflows/reuse.yml b/.github/workflows/reuse.yml
index 44c8d320..bfa68136 100644
--- a/.github/workflows/reuse.yml
+++ b/.github/workflows/reuse.yml
@@ -18,7 +18,7 @@ jobs:
   spdx-check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: REUSE Compliance Check
         uses: fsfe/reuse-action@v6