diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a2e8fe91..98df16ee 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -34,7 +34,7 @@ jobs:
             ruby-version: '3.4'
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Set up Ruby ${{ matrix.ruby-version }}
         uses: ruby/setup-ruby@v1
@@ -62,7 +62,7 @@ jobs:
 
       - name: Upload coverage report
         if: matrix.coverage
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: coverage-html
           path: coverage/
@@ -89,7 +89,7 @@ jobs:
     timeout-minutes: 15
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Set up Ruby 3.4
         uses: ruby/setup-ruby@v1
@@ -125,7 +125,7 @@ jobs:
       BUNDLE_GEMFILE: ${{ github.workspace }}/gemfiles/${{ matrix.gemfile }}.gemfile
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Set up Ruby ${{ matrix.ruby-version }}
         uses: ruby/setup-ruby@v1
@@ -161,7 +161,7 @@ jobs:
       BUNDLE_GEMFILE: ${{ github.workspace }}/gemfiles/${{ matrix.gemfile }}.gemfile
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Set up Ruby ${{ matrix.ruby-version }}
         uses: ruby/setup-ruby@v1
diff --git a/.github/workflows/cli-pin-bump.yml b/.github/workflows/cli-pin-bump.yml
index 0dc3561f..454c88cd 100644
--- a/.github/workflows/cli-pin-bump.yml
+++ b/.github/workflows/cli-pin-bump.yml
@@ -35,7 +35,7 @@ jobs:
   bump:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Read upstream pin
         id: upstream
@@ -81,7 +81,7 @@ jobs:
 
       # No-ops (creates no PR) when the tree is unchanged, i.e. already current.
       - name: Open PR
-        uses: peter-evans/create-pull-request@v6
+        uses: peter-evans/create-pull-request@v8
         with:
           token: ${{ secrets.CLI_PIN_BUMP_TOKEN || secrets.GITHUB_TOKEN }}
           branch: chore/bump-pinned-cli
diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
index 17cb6490..460b5e7f 100644
--- a/.github/workflows/integration.yml
+++ b/.github/workflows/integration.yml
@@ -51,7 +51,7 @@ jobs:
     timeout-minutes: 10
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Set up Ruby 3.4
         uses: ruby/setup-ruby@v1
@@ -112,7 +112,7 @@ jobs:
     timeout-minutes: 20
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Set up Ruby 3.4
         uses: ruby/setup-ruby@v1
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index a413b182..8a50d0a6 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -17,7 +17,7 @@ jobs:
       id-token: write
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1