diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9cd243b..edd8187 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -15,7 +15,7 @@ jobs:
     name: Format check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           path: dpp-engine
       - uses: dtolnay/rust-toolchain@stable
@@ -29,7 +29,7 @@ jobs:
     name: Clippy
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           path: dpp-engine
       - uses: dtolnay/rust-toolchain@stable
@@ -46,7 +46,7 @@ jobs:
     name: Unit tests
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           path: dpp-engine
       - uses: dtolnay/rust-toolchain@stable
@@ -68,7 +68,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: [test-unit]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           path: dpp-engine
       - uses: dtolnay/rust-toolchain@stable
@@ -133,7 +133,7 @@ jobs:
     name: No debug prints in service crates
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           path: dpp-engine
       # Forbid println!/eprintln!/dbg! in crates/**/src (service code).
@@ -160,7 +160,7 @@ jobs:
     name: No raw event subject literals outside dpp-common::event
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           path: dpp-engine
       # event_type/NATS-subject strings must come from dpp_common::event::subjects,
@@ -188,7 +188,7 @@ jobs:
     name: No public items in mod.rs (index files only)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           path: dpp-engine
       # mod.rs should be `mod` + `pub use` only. Two allocation-plan
@@ -220,7 +220,7 @@ jobs:
     name: Security audit
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           path: dpp-engine
       - uses: dtolnay/rust-toolchain@stable
@@ -237,7 +237,7 @@ jobs:
     name: Postgres integration tests
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           path: dpp-engine
       - uses: dtolnay/rust-toolchain@stable
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index af8319f..ebe0b94 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -36,7 +36,7 @@ jobs:
               JSON-LD, no authentication required.
             readme: crates/dpp-resolver/README.md
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           path: dpp-engine