diff --git a/.forgejo/workflows/deploy.yaml b/.forgejo/workflows/deploy.yaml
index a0f52c5..9697643 100644
--- a/.forgejo/workflows/deploy.yaml
+++ b/.forgejo/workflows/deploy.yaml
@@ -32,7 +32,7 @@ jobs:
           nix-env -iA nixpkgs.nodejs_22
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Cache gems
         uses: actions/cache@v4
@@ -94,7 +94,7 @@ jobs:
           pacman -Syu --noconfirm nodejs openssh rsync
 
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Deploy docker-compose.yml
         uses: easingthemes/ssh-deploy@v5.1.0
diff --git a/.forgejo/workflows/test.yaml b/.forgejo/workflows/test.yaml
index f2845b6..b654c71 100644
--- a/.forgejo/workflows/test.yaml
+++ b/.forgejo/workflows/test.yaml
@@ -38,7 +38,7 @@ jobs:
           nix-env -iA nixpkgs.nodejs_22
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       # The nix closure persists in the runner's nix-store volume; gems live
       # in the workspace (.gems via the flake's BUNDLE_PATH), so cache those.